@open-mercato/core 0.6.7-develop.6673.1.a9bf54a072 → 0.6.7-develop.6676.1.7dad6df292

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
-[build:core] found 3665 entry points
+[build:core] found 3669 entry points
 [build:core] built successfully
 [build:core:generated] found 197 entry points
 [build:core:generated] built successfully

package/dist/modules/audit_logs/api/audit-logs/access/route.js

@@ -3,6 +3,7 @@ import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveFeatureCheckContext } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { loadAuditLogDisplayMaps } from "../display.js";
+import { requireResolvedTenantScope } from "../readScope.js";
 import { z } from "zod";
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["audit_logs.view_self"] }
@@ -61,6 +62,8 @@ function parseNumber(param, { min, max, fallback }) {
 async function GET(req) {
   const auth = await getAuthFromRequest(req);
   if (!auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  const tenantScopeGuard = requireResolvedTenantScope(auth);
+  if (tenantScopeGuard) return tenantScopeGuard;
   const container = await createRequestContainer();
   const { organizationId: defaultOrganizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req });
   const rbac = container.resolve("rbacService");
@@ -152,7 +155,8 @@ const openApi = {
       ],
       errors: [
         { status: 400, description: "Invalid filters supplied", schema: errorSchema },
-        { status: 401, description: "Authentication required", schema: errorSchema }
+        { status: 401, description: "Authentication required", schema: errorSchema },
+        { status: 403, description: "Caller has no resolved tenant scope and is not a superadmin", schema: errorSchema }
       ]
     }
   }

package/dist/modules/audit_logs/api/audit-logs/access/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/audit_logs/api/audit-logs/access/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveFeatureCheckContext } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { AccessLogService } from '@open-mercato/core/modules/audit_logs/services/accessLogService'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { loadAuditLogDisplayMaps } from '../display'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['audit_logs.view_self'] },\n}\n\nconst auditAccessQuerySchema = z.object({\n  organizationId: z.string().uuid().describe('Limit results to a specific organization').optional(),\n  actorUserId: z.string().uuid().describe('Filter by actor user id (tenant administrators only)').optional(),\n  resourceKind: z.string().describe('Restrict to a resource kind such as `order` or `product`').optional(),\n  accessType: z.string().describe('Access type filter, e.g. `read` or `export`').optional(),\n  page: z.string().describe('Page number (default 1)').optional(),\n  pageSize: z.string().describe('Page size (default 50)').optional(),\n  limit: z.string().describe('Explicit maximum number of records when paginating manually').optional(),\n  before: z.string().describe('Return logs created before this ISO-8601 timestamp').optional(),\n  after: z.string().describe('Return logs created after this ISO-8601 timestamp').optional(),\n})\n\nconst auditAccessItemSchema = z.object({\n  id: z.string(),\n  resourceKind: z.string(),\n  resourceId: z.string(),\n  accessType: z.string(),\n  actorUserId: z.string().uuid().nullable(),\n  actorUserName: z.string().nullable(),\n  tenantId: z.string().uuid().nullable(),\n  tenantName: z.string().nullable(),\n  organizationId: z.string().uuid().nullable(),\n  organizationName: z.string().nullable(),\n  fields: z.array(z.string()),\n  context: z.record(z.string(), z.unknown()).nullable(),\n  createdAt: z.string(),\n})\n\nconst auditAccessResponseSchema = z.object({\n  items: z.array(auditAccessItemSchema),\n  canViewTenant: z.boolean(),\n  page: z.number().int(),\n  pageSize: z.number().int(),\n  total: z.number().int(),\n  totalPages: z.number().int(),\n})\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\nfunction parseDate(value: string | null): Date | undefined {\n  if (!value) return undefined\n  const ts = Date.parse(value)\n  if (Number.isNaN(ts)) return undefined\n  return new Date(ts)\n}\n\nfunction parseNumber(param: string | null, { min, max, fallback }: { min: number; max: number; fallback: number }) {\n  if (!param) return fallback\n  const value = Number(param)\n  if (!Number.isFinite(value)) return fallback\n  const normalized = Math.trunc(value)\n  if (Number.isNaN(normalized)) return fallback\n  return Math.min(Math.max(normalized, min), max)\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const container = await createRequestContainer()\n  const { organizationId: defaultOrganizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req })\n\n  const rbac = (container.resolve('rbacService') as RbacService)\n  const accessLogs = (container.resolve('accessLogService') as AccessLogService)\n  const em = (container.resolve('em') as EntityManager)\n\n  const canViewTenant = await rbac.userHasAllFeatures(\n    auth.sub,\n    ['audit_logs.view_tenant'],\n    { tenantId: auth.tenantId ?? null, organizationId: defaultOrganizationId ?? null },\n  )\n\n  const url = new URL(req.url)\n  const queryOrgId = url.searchParams.get('organizationId')\n  const actorQuery = url.searchParams.get('actorUserId')\n  const resourceKind = url.searchParams.get('resourceKind')\n  const accessType = url.searchParams.get('accessType')\n  const page = parseNumber(url.searchParams.get('page'), { min: 1, max: 1000000, fallback: 1 })\n  const pageSize = parseNumber(url.searchParams.get('pageSize'), { min: 1, max: 200, fallback: 50 })\n  const before = parseDate(url.searchParams.get('before'))\n  const after = parseDate(url.searchParams.get('after'))\n\n  let organizationId = defaultOrganizationId\n  if (queryOrgId) {\n    if (scope.allowedIds === null || scope.allowedIds.includes(queryOrgId)) {\n      organizationId = queryOrgId\n    }\n  }\n\n  let actorUserId = auth.sub\n  if (canViewTenant && actorQuery) {\n    actorUserId = actorQuery\n  }\n\n  let list: Awaited<ReturnType<AccessLogService['list']>>\n  try {\n    list = await accessLogs.list({\n      tenantId: auth.tenantId ?? undefined,\n      organizationId: organizationId ?? undefined,\n      actorUserId,\n      resourceKind: resourceKind ?? undefined,\n      accessType: accessType ?? undefined,\n      page,\n      pageSize,\n      limit: url.searchParams.get('limit') ? parseNumber(url.searchParams.get('limit'), { min: 1, max: 200, fallback: pageSize }) : undefined,\n      before,\n      after,\n    })\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 })\n    }\n    throw err\n  }\n\n  const displayMaps = await loadAuditLogDisplayMaps(em, {\n    userIds: list.items.map((entry) => entry.actorUserId).filter((value): value is string => !!value),\n    tenantIds: list.items.map((entry) => entry.tenantId).filter((value): value is string => !!value),\n    organizationIds: list.items.map((entry) => entry.organizationId).filter((value): value is string => !!value),\n  })\n\n  const items = list.items.map((entry) => ({\n    id: entry.id,\n    resourceKind: entry.resourceKind,\n    resourceId: entry.resourceId,\n    accessType: entry.accessType,\n    actorUserId: entry.actorUserId,\n    actorUserName: entry.actorUserId ? displayMaps.users[entry.actorUserId] ?? null : null,\n    tenantId: entry.tenantId,\n    tenantName: entry.tenantId ? displayMaps.tenants[entry.tenantId] ?? null : null,\n    organizationId: entry.organizationId,\n    organizationName: entry.organizationId ? displayMaps.organizations[entry.organizationId] ?? null : null,\n    fields: entry.fieldsJson ?? [],\n    context: entry.contextJson,\n    createdAt: entry.createdAt?.toISOString?.() ?? entry.createdAt,\n  }))\n\n  return NextResponse.json({\n    items,\n    canViewTenant,\n    page: list.page,\n    pageSize: list.pageSize,\n    total: list.total,\n    totalPages: list.totalPages,\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'List access audit logs',\n  description: 'Retrieve read-only audit log entries detailing resource access within the current tenant or organization.',\n  methods: {\n    GET: {\n      summary: 'Retrieve access logs',\n      description:\n        'Fetches paginated access audit logs scoped to the authenticated user. Tenant administrators can optionally expand the search to other actors or organizations.',\n      query: auditAccessQuerySchema,\n      responses: [\n        { status: 200, description: 'Access logs returned successfully', schema: auditAccessResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid filters supplied', schema: errorSchema },\n        { status: 401, description: 'Authentication required', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,kCAAkC;AAI3C,SAAS,+BAA+B;AACxC,SAAS,SAAS;AAGX,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,0CAA0C,EAAE,SAAS;AAAA,EAChG,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,sDAAsD,EAAE,SAAS;AAAA,EACzG,cAAc,EAAE,OAAO,EAAE,SAAS,0DAA0D,EAAE,SAAS;AAAA,EACvG,YAAY,EAAE,OAAO,EAAE,SAAS,6CAA6C,EAAE,SAAS;AAAA,EACxF,MAAM,EAAE,OAAO,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAC9D,UAAU,EAAE,OAAO,EAAE,SAAS,wBAAwB,EAAE,SAAS;AAAA,EACjE,OAAO,EAAE,OAAO,EAAE,SAAS,6DAA6D,EAAE,SAAS;AAAA,EACnG,QAAQ,EAAE,OAAO,EAAE,SAAS,oDAAoD,EAAE,SAAS;AAAA,EAC3F,OAAO,EAAE,OAAO,EAAE,SAAS,mDAAmD,EAAE,SAAS;AAC3F,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO;AAAA,EACb,cAAc,EAAE,OAAO;AAAA,EACvB,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AAAA,EACrB,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,eAAe,EAAE,QAAQ;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,IAAI;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,IAAI;AAAA,EACzB,OAAO,EAAE,OAAO,EAAE,IAAI;AAAA,EACtB,YAAY,EAAE,OAAO,EAAE,IAAI;AAC7B,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,SAAS,UAAU,OAAwC;AACzD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,KAAK,KAAK,MAAM,KAAK;AAC3B,MAAI,OAAO,MAAM,EAAE,EAAG,QAAO;AAC7B,SAAO,IAAI,KAAK,EAAE;AACpB;AAEA,SAAS,YAAY,OAAsB,EAAE,KAAK,KAAK,SAAS,GAAmD;AACjH,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,QAAM,aAAa,KAAK,MAAM,KAAK;AACnC,MAAI,OAAO,MAAM,UAAU,EAAG,QAAO;AACrC,SAAO,KAAK,IAAI,KAAK,IAAI,YAAY,GAAG,GAAG,GAAG;AAChD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAE3H,QAAM,OAAQ,UAAU,QAAQ,aAAa;AAC7C,QAAM,aAAc,UAAU,QAAQ,kBAAkB;AACxD,QAAM,KAAM,UAAU,QAAQ,IAAI;AAElC,QAAM,gBAAgB,MAAM,KAAK;AAAA,IAC/B,KAAK;AAAA,IACL,CAAC,wBAAwB;AAAA,IACzB,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,yBAAyB,KAAK;AAAA,EACnF;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,aAAa,IAAI,aAAa,IAAI,gBAAgB;AACxD,QAAM,aAAa,IAAI,aAAa,IAAI,aAAa;AACrD,QAAM,eAAe,IAAI,aAAa,IAAI,cAAc;AACxD,QAAM,aAAa,IAAI,aAAa,IAAI,YAAY;AACpD,QAAM,OAAO,YAAY,IAAI,aAAa,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG,KAAK,KAAS,UAAU,EAAE,CAAC;AAC5F,QAAM,WAAW,YAAY,IAAI,aAAa,IAAI,UAAU,GAAG,EAAE,KAAK,GAAG,KAAK,KAAK,UAAU,GAAG,CAAC;AACjG,QAAM,SAAS,UAAU,IAAI,aAAa,IAAI,QAAQ,CAAC;AACvD,QAAM,QAAQ,UAAU,IAAI,aAAa,IAAI,OAAO,CAAC;AAErD,MAAI,iBAAiB;AACrB,MAAI,YAAY;AACd,QAAI,MAAM,eAAe,QAAQ,MAAM,WAAW,SAAS,UAAU,GAAG;AACtE,uBAAiB;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,cAAc,KAAK;AACvB,MAAI,iBAAiB,YAAY;AAC/B,kBAAc;AAAA,EAChB;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,WAAW,KAAK;AAAA,MAC3B,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,kBAAkB;AAAA,MAClC;AAAA,MACA,cAAc,gBAAgB;AAAA,MAC9B,YAAY,cAAc;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,OAAO,IAAI,aAAa,IAAI,OAAO,IAAI,YAAY,IAAI,aAAa,IAAI,OAAO,GAAG,EAAE,KAAK,GAAG,KAAK,KAAK,UAAU,SAAS,CAAC,IAAI;AAAA,MAC9H;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AACA,UAAM;AAAA,EACR;AAEA,QAAM,cAAc,MAAM,wBAAwB,IAAI;AAAA,IACpD,SAAS,KAAK,MAAM,IAAI,CAAC,UAAU,MAAM,WAAW,EAAE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,IAChG,WAAW,KAAK,MAAM,IAAI,CAAC,UAAU,MAAM,QAAQ,EAAE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,IAC/F,iBAAiB,KAAK,MAAM,IAAI,CAAC,UAAU,MAAM,cAAc,EAAE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,EAC7G,CAAC;AAED,QAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,WAAW;AAAA,IACvC,IAAI,MAAM;AAAA,IACV,cAAc,MAAM;AAAA,IACpB,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM;AAAA,IAClB,aAAa,MAAM;AAAA,IACnB,eAAe,MAAM,cAAc,YAAY,MAAM,MAAM,WAAW,KAAK,OAAO;AAAA,IAClF,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,WAAW,YAAY,QAAQ,MAAM,QAAQ,KAAK,OAAO;AAAA,IAC3E,gBAAgB,MAAM;AAAA,IACtB,kBAAkB,MAAM,iBAAiB,YAAY,cAAc,MAAM,cAAc,KAAK,OAAO;AAAA,IACnG,QAAQ,MAAM,cAAc,CAAC;AAAA,IAC7B,SAAS,MAAM;AAAA,IACf,WAAW,MAAM,WAAW,cAAc,KAAK,MAAM;AAAA,EACvD,EAAE;AAEF,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA;AAAA,IACA,MAAM,KAAK;AAAA,IACX,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,IACZ,YAAY,KAAK;AAAA,EACnB,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,0BAA0B;AAAA,MACrG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,YAAY;AAAA,QAC5E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveFeatureCheckContext } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { AccessLogService } from '@open-mercato/core/modules/audit_logs/services/accessLogService'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { loadAuditLogDisplayMaps } from '../display'\nimport { requireResolvedTenantScope } from '../readScope'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['audit_logs.view_self'] },\n}\n\nconst auditAccessQuerySchema = z.object({\n  organizationId: z.string().uuid().describe('Limit results to a specific organization').optional(),\n  actorUserId: z.string().uuid().describe('Filter by actor user id (tenant administrators only)').optional(),\n  resourceKind: z.string().describe('Restrict to a resource kind such as `order` or `product`').optional(),\n  accessType: z.string().describe('Access type filter, e.g. `read` or `export`').optional(),\n  page: z.string().describe('Page number (default 1)').optional(),\n  pageSize: z.string().describe('Page size (default 50)').optional(),\n  limit: z.string().describe('Explicit maximum number of records when paginating manually').optional(),\n  before: z.string().describe('Return logs created before this ISO-8601 timestamp').optional(),\n  after: z.string().describe('Return logs created after this ISO-8601 timestamp').optional(),\n})\n\nconst auditAccessItemSchema = z.object({\n  id: z.string(),\n  resourceKind: z.string(),\n  resourceId: z.string(),\n  accessType: z.string(),\n  actorUserId: z.string().uuid().nullable(),\n  actorUserName: z.string().nullable(),\n  tenantId: z.string().uuid().nullable(),\n  tenantName: z.string().nullable(),\n  organizationId: z.string().uuid().nullable(),\n  organizationName: z.string().nullable(),\n  fields: z.array(z.string()),\n  context: z.record(z.string(), z.unknown()).nullable(),\n  createdAt: z.string(),\n})\n\nconst auditAccessResponseSchema = z.object({\n  items: z.array(auditAccessItemSchema),\n  canViewTenant: z.boolean(),\n  page: z.number().int(),\n  pageSize: z.number().int(),\n  total: z.number().int(),\n  totalPages: z.number().int(),\n})\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\nfunction parseDate(value: string | null): Date | undefined {\n  if (!value) return undefined\n  const ts = Date.parse(value)\n  if (Number.isNaN(ts)) return undefined\n  return new Date(ts)\n}\n\nfunction parseNumber(param: string | null, { min, max, fallback }: { min: number; max: number; fallback: number }) {\n  if (!param) return fallback\n  const value = Number(param)\n  if (!Number.isFinite(value)) return fallback\n  const normalized = Math.trunc(value)\n  if (Number.isNaN(normalized)) return fallback\n  return Math.min(Math.max(normalized, min), max)\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tenantScopeGuard = requireResolvedTenantScope(auth)\n  if (tenantScopeGuard) return tenantScopeGuard\n\n  const container = await createRequestContainer()\n  const { organizationId: defaultOrganizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req })\n\n  const rbac = (container.resolve('rbacService') as RbacService)\n  const accessLogs = (container.resolve('accessLogService') as AccessLogService)\n  const em = (container.resolve('em') as EntityManager)\n\n  const canViewTenant = await rbac.userHasAllFeatures(\n    auth.sub,\n    ['audit_logs.view_tenant'],\n    { tenantId: auth.tenantId ?? null, organizationId: defaultOrganizationId ?? null },\n  )\n\n  const url = new URL(req.url)\n  const queryOrgId = url.searchParams.get('organizationId')\n  const actorQuery = url.searchParams.get('actorUserId')\n  const resourceKind = url.searchParams.get('resourceKind')\n  const accessType = url.searchParams.get('accessType')\n  const page = parseNumber(url.searchParams.get('page'), { min: 1, max: 1000000, fallback: 1 })\n  const pageSize = parseNumber(url.searchParams.get('pageSize'), { min: 1, max: 200, fallback: 50 })\n  const before = parseDate(url.searchParams.get('before'))\n  const after = parseDate(url.searchParams.get('after'))\n\n  let organizationId = defaultOrganizationId\n  if (queryOrgId) {\n    if (scope.allowedIds === null || scope.allowedIds.includes(queryOrgId)) {\n      organizationId = queryOrgId\n    }\n  }\n\n  let actorUserId = auth.sub\n  if (canViewTenant && actorQuery) {\n    actorUserId = actorQuery\n  }\n\n  let list: Awaited<ReturnType<AccessLogService['list']>>\n  try {\n    list = await accessLogs.list({\n      tenantId: auth.tenantId ?? undefined,\n      organizationId: organizationId ?? undefined,\n      actorUserId,\n      resourceKind: resourceKind ?? undefined,\n      accessType: accessType ?? undefined,\n      page,\n      pageSize,\n      limit: url.searchParams.get('limit') ? parseNumber(url.searchParams.get('limit'), { min: 1, max: 200, fallback: pageSize }) : undefined,\n      before,\n      after,\n    })\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 })\n    }\n    throw err\n  }\n\n  const displayMaps = await loadAuditLogDisplayMaps(em, {\n    userIds: list.items.map((entry) => entry.actorUserId).filter((value): value is string => !!value),\n    tenantIds: list.items.map((entry) => entry.tenantId).filter((value): value is string => !!value),\n    organizationIds: list.items.map((entry) => entry.organizationId).filter((value): value is string => !!value),\n  })\n\n  const items = list.items.map((entry) => ({\n    id: entry.id,\n    resourceKind: entry.resourceKind,\n    resourceId: entry.resourceId,\n    accessType: entry.accessType,\n    actorUserId: entry.actorUserId,\n    actorUserName: entry.actorUserId ? displayMaps.users[entry.actorUserId] ?? null : null,\n    tenantId: entry.tenantId,\n    tenantName: entry.tenantId ? displayMaps.tenants[entry.tenantId] ?? null : null,\n    organizationId: entry.organizationId,\n    organizationName: entry.organizationId ? displayMaps.organizations[entry.organizationId] ?? null : null,\n    fields: entry.fieldsJson ?? [],\n    context: entry.contextJson,\n    createdAt: entry.createdAt?.toISOString?.() ?? entry.createdAt,\n  }))\n\n  return NextResponse.json({\n    items,\n    canViewTenant,\n    page: list.page,\n    pageSize: list.pageSize,\n    total: list.total,\n    totalPages: list.totalPages,\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'List access audit logs',\n  description: 'Retrieve read-only audit log entries detailing resource access within the current tenant or organization.',\n  methods: {\n    GET: {\n      summary: 'Retrieve access logs',\n      description:\n        'Fetches paginated access audit logs scoped to the authenticated user. Tenant administrators can optionally expand the search to other actors or organizations.',\n      query: auditAccessQuerySchema,\n      responses: [\n        { status: 200, description: 'Access logs returned successfully', schema: auditAccessResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid filters supplied', schema: errorSchema },\n        { status: 401, description: 'Authentication required', schema: errorSchema },\n        { status: 403, description: 'Caller has no resolved tenant scope and is not a superadmin', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,kCAAkC;AAI3C,SAAS,+BAA+B;AACxC,SAAS,kCAAkC;AAC3C,SAAS,SAAS;AAGX,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,0CAA0C,EAAE,SAAS;AAAA,EAChG,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,sDAAsD,EAAE,SAAS;AAAA,EACzG,cAAc,EAAE,OAAO,EAAE,SAAS,0DAA0D,EAAE,SAAS;AAAA,EACvG,YAAY,EAAE,OAAO,EAAE,SAAS,6CAA6C,EAAE,SAAS;AAAA,EACxF,MAAM,EAAE,OAAO,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAC9D,UAAU,EAAE,OAAO,EAAE,SAAS,wBAAwB,EAAE,SAAS;AAAA,EACjE,OAAO,EAAE,OAAO,EAAE,SAAS,6DAA6D,EAAE,SAAS;AAAA,EACnG,QAAQ,EAAE,OAAO,EAAE,SAAS,oDAAoD,EAAE,SAAS;AAAA,EAC3F,OAAO,EAAE,OAAO,EAAE,SAAS,mDAAmD,EAAE,SAAS;AAC3F,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO;AAAA,EACb,cAAc,EAAE,OAAO;AAAA,EACvB,YAAY,EAAE,OAAO;AAAA,EACrB,YAAY,EAAE,OAAO;AAAA,EACrB,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC;AAAA,EAC1B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,eAAe,EAAE,QAAQ;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,IAAI;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,IAAI;AAAA,EACzB,OAAO,EAAE,OAAO,EAAE,IAAI;AAAA,EACtB,YAAY,EAAE,OAAO,EAAE,IAAI;AAC7B,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,SAAS,UAAU,OAAwC;AACzD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,KAAK,KAAK,MAAM,KAAK;AAC3B,MAAI,OAAO,MAAM,EAAE,EAAG,QAAO;AAC7B,SAAO,IAAI,KAAK,EAAE;AACpB;AAEA,SAAS,YAAY,OAAsB,EAAE,KAAK,KAAK,SAAS,GAAmD;AACjH,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,QAAM,aAAa,KAAK,MAAM,KAAK;AACnC,MAAI,OAAO,MAAM,UAAU,EAAG,QAAO;AACrC,SAAO,KAAK,IAAI,KAAK,IAAI,YAAY,GAAG,GAAG,GAAG;AAChD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,mBAAmB,2BAA2B,IAAI;AACxD,MAAI,iBAAkB,QAAO;AAE7B,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAE3H,QAAM,OAAQ,UAAU,QAAQ,aAAa;AAC7C,QAAM,aAAc,UAAU,QAAQ,kBAAkB;AACxD,QAAM,KAAM,UAAU,QAAQ,IAAI;AAElC,QAAM,gBAAgB,MAAM,KAAK;AAAA,IAC/B,KAAK;AAAA,IACL,CAAC,wBAAwB;AAAA,IACzB,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,yBAAyB,KAAK;AAAA,EACnF;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,aAAa,IAAI,aAAa,IAAI,gBAAgB;AACxD,QAAM,aAAa,IAAI,aAAa,IAAI,aAAa;AACrD,QAAM,eAAe,IAAI,aAAa,IAAI,cAAc;AACxD,QAAM,aAAa,IAAI,aAAa,IAAI,YAAY;AACpD,QAAM,OAAO,YAAY,IAAI,aAAa,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG,KAAK,KAAS,UAAU,EAAE,CAAC;AAC5F,QAAM,WAAW,YAAY,IAAI,aAAa,IAAI,UAAU,GAAG,EAAE,KAAK,GAAG,KAAK,KAAK,UAAU,GAAG,CAAC;AACjG,QAAM,SAAS,UAAU,IAAI,aAAa,IAAI,QAAQ,CAAC;AACvD,QAAM,QAAQ,UAAU,IAAI,aAAa,IAAI,OAAO,CAAC;AAErD,MAAI,iBAAiB;AACrB,MAAI,YAAY;AACd,QAAI,MAAM,eAAe,QAAQ,MAAM,WAAW,SAAS,UAAU,GAAG;AACtE,uBAAiB;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,cAAc,KAAK;AACvB,MAAI,iBAAiB,YAAY;AAC/B,kBAAc;AAAA,EAChB;AAEA,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,WAAW,KAAK;AAAA,MAC3B,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,kBAAkB;AAAA,MAClC;AAAA,MACA,cAAc,gBAAgB;AAAA,MAC9B,YAAY,cAAc;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,OAAO,IAAI,aAAa,IAAI,OAAO,IAAI,YAAY,IAAI,aAAa,IAAI,OAAO,GAAG,EAAE,KAAK,GAAG,KAAK,KAAK,UAAU,SAAS,CAAC,IAAI;AAAA,MAC9H;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AACA,UAAM;AAAA,EACR;AAEA,QAAM,cAAc,MAAM,wBAAwB,IAAI;AAAA,IACpD,SAAS,KAAK,MAAM,IAAI,CAAC,UAAU,MAAM,WAAW,EAAE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,IAChG,WAAW,KAAK,MAAM,IAAI,CAAC,UAAU,MAAM,QAAQ,EAAE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,IAC/F,iBAAiB,KAAK,MAAM,IAAI,CAAC,UAAU,MAAM,cAAc,EAAE,OAAO,CAAC,UAA2B,CAAC,CAAC,KAAK;AAAA,EAC7G,CAAC;AAED,QAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,WAAW;AAAA,IACvC,IAAI,MAAM;AAAA,IACV,cAAc,MAAM;AAAA,IACpB,YAAY,MAAM;AAAA,IAClB,YAAY,MAAM;AAAA,IAClB,aAAa,MAAM;AAAA,IACnB,eAAe,MAAM,cAAc,YAAY,MAAM,MAAM,WAAW,KAAK,OAAO;AAAA,IAClF,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,WAAW,YAAY,QAAQ,MAAM,QAAQ,KAAK,OAAO;AAAA,IAC3E,gBAAgB,MAAM;AAAA,IACtB,kBAAkB,MAAM,iBAAiB,YAAY,cAAc,MAAM,cAAc,KAAK,OAAO;AAAA,IACnG,QAAQ,MAAM,cAAc,CAAC;AAAA,IAC7B,SAAS,MAAM;AAAA,IACf,WAAW,MAAM,WAAW,cAAc,KAAK,MAAM;AAAA,EACvD,EAAE;AAEF,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA;AAAA,IACA,MAAM,KAAK;AAAA,IACX,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,IACZ,YAAY,KAAK;AAAA,EACnB,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,0BAA0B;AAAA,MACrG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,4BAA4B,QAAQ,YAAY;AAAA,QAC5E,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,+DAA+D,QAAQ,YAAY;AAAA,MACjH;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/audit_logs/api/audit-logs/actions/export/route.js

@@ -12,6 +12,7 @@ import {
   deriveActionLogSource
 } from "@open-mercato/core/modules/audit_logs/lib/projections";
 import { loadAuditLogDisplayMaps } from "../../display.js";
+import { requireResolvedTenantScope } from "../../readScope.js";
 const metadata = {
   GET: { requireAuth: true, requireFeatures: ["audit_logs.view_self"] }
 };
@@ -70,6 +71,8 @@ function formatValue(value) {
 async function GET(req) {
   const auth = await getAuthFromRequest(req);
   if (!auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  const tenantScopeGuard = requireResolvedTenantScope(auth);
+  if (tenantScopeGuard) return tenantScopeGuard;
   const container = await createRequestContainer();
   const { organizationId: defaultOrganizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req });
   const rbac = container.resolve("rbacService");
@@ -203,7 +206,8 @@ const openApi = {
       ],
       errors: [
         { status: 400, description: "Invalid filter values", schema: errorSchema },
-        { status: 401, description: "Authentication required", schema: errorSchema }
+        { status: 401, description: "Authentication required", schema: errorSchema },
+        { status: 403, description: "Caller has no resolved tenant scope and is not a superadmin", schema: errorSchema }
       ]
     }
   }

package/dist/modules/audit_logs/api/audit-logs/actions/export/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../../src/modules/audit_logs/api/audit-logs/actions/export/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { defaultExportFilename, serializeExport, type PreparedExport } from '@open-mercato/shared/lib/crud/exporters'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { resolveFeatureCheckContext } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { extractChangeRows } from '@open-mercato/core/modules/audit_logs/lib/changeRows'\nimport {\n  ACTION_LOG_FILTER_TYPES,\n  deriveActionLogActionType,\n  deriveActionLogSource,\n} from '@open-mercato/core/modules/audit_logs/lib/projections'\nimport { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'\nimport { loadAuditLogDisplayMaps } from '../../display'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['audit_logs.view_self'] },\n}\n\nconst ACTION_TYPE_TOKENS = ACTION_LOG_FILTER_TYPES\nconst SORT_FIELDS = ['createdAt', 'user', 'action', 'field', 'source'] as const\nconst SORT_DIRECTIONS = ['asc', 'desc'] as const\n\nconst exportQuerySchema = z.object({\n  organizationId: z.string().uuid().describe('Limit results to a specific organization').optional(),\n  actorUserId: z\n    .string()\n    .describe('Filter logs created by specific actor IDs (tenant administrators only). Accepts a single UUID or a comma-separated UUID list.')\n    .optional(),\n  resourceKind: z.string().describe('Filter by resource kind (e.g., \"order\", \"product\")').optional(),\n  resourceId: z.string().describe('Filter by resource ID (UUID of the specific record)').optional(),\n  actionType: z\n    .string()\n    .describe('Filter by action type (`create`, `edit`, `delete`, `assign`). Accepts a single value or a comma-separated list.')\n    .optional(),\n  fieldName: z\n    .string()\n    .describe('Filter to entries where the given field changed. Accepts a single field name or a comma-separated list.')\n    .optional(),\n  includeRelated: z\n    .enum(['true', 'false'])\n    .default('false')\n    .describe('When `true`, also returns changes to child entities linked via parentResourceKind/parentResourceId')\n    .optional(),\n  undoableOnly: z\n    .enum(['true', 'false'])\n    .default('false')\n    .describe('When `true`, only undoable actions are returned')\n    .optional(),\n  limit: z.string().describe('Maximum number of records to export (default 1000, capped at 1000)').optional(),\n  sortField: z\n    .enum(SORT_FIELDS)\n    .describe('Sort field: `createdAt`, `user`, `action`, `field`, or `source`.')\n    .optional(),\n  sortDir: z\n    .enum(SORT_DIRECTIONS)\n    .describe('Sort direction: `asc` or `desc`.')\n    .optional(),\n  before: z.string().describe('Return actions created before this ISO-8601 timestamp').optional(),\n  after: z.string().describe('Return actions created after this ISO-8601 timestamp').optional(),\n})\n\nconst responseSchema = z.object({\n  file: z.literal('csv'),\n})\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\nfunction splitCsv(value: string | null): string[] {\n  if (!value) return []\n  return value\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n}\n\nfunction parseActionTypes(param: string | null) {\n  return splitCsv(param).filter((value): value is (typeof ACTION_TYPE_TOKENS)[number] =>\n    ACTION_TYPE_TOKENS.includes(value as (typeof ACTION_TYPE_TOKENS)[number]),\n  )\n}\n\nfunction parseLimit(param: string | null): number {\n  if (!param) return 1000\n  const value = Number(param)\n  if (!Number.isFinite(value)) return 1000\n  return Math.min(Math.max(Math.trunc(value), 1), 1000)\n}\n\nfunction parseDate(value: string | null): Date | undefined {\n  if (!value) return undefined\n  const timestamp = Date.parse(value)\n  if (Number.isNaN(timestamp)) return undefined\n  return new Date(timestamp)\n}\n\nfunction formatValue(value: unknown): string {\n  if (value == null) return ''\n  if (value instanceof Date) return value.toISOString()\n  if (Array.isArray(value)) return value.map((entry) => formatValue(entry)).filter(Boolean).join(', ')\n  if (typeof value === 'object') return JSON.stringify(value)\n  return String(value)\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const container = await createRequestContainer()\n  const { organizationId: defaultOrganizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req })\n  const rbac = container.resolve('rbacService') as RbacService\n  const actionLogs = container.resolve('actionLogService') as ActionLogService\n  const em = container.resolve('em') as EntityManager\n\n  const canViewTenant = await rbac.userHasAllFeatures(\n    auth.sub,\n    ['audit_logs.view_tenant'],\n    { tenantId: auth.tenantId ?? null, organizationId: defaultOrganizationId ?? null },\n  )\n\n  const url = new URL(req.url)\n  const queryOrgId = url.searchParams.get('organizationId')\n  const actorQuery = url.searchParams.get('actorUserId')\n  const resourceKind = url.searchParams.get('resourceKind') ?? undefined\n  const resourceId = url.searchParams.get('resourceId') ?? undefined\n  const actionTypes = parseActionTypes(url.searchParams.get('actionType'))\n  const fieldNames = splitCsv(url.searchParams.get('fieldName'))\n  const includeRelated = parseBooleanToken(url.searchParams.get('includeRelated')) === true\n  const undoableOnly = parseBooleanToken(url.searchParams.get('undoableOnly')) === true\n  const limit = parseLimit(url.searchParams.get('limit'))\n  const sortField = SORT_FIELDS.find((value) => value === url.searchParams.get('sortField')) ?? 'createdAt'\n  const sortDir = SORT_DIRECTIONS.find((value) => value === url.searchParams.get('sortDir')) ?? 'desc'\n  const before = parseDate(url.searchParams.get('before'))\n  const after = parseDate(url.searchParams.get('after'))\n\n  let organizationId = defaultOrganizationId\n  if (queryOrgId) {\n    if (scope.allowedIds === null || scope.allowedIds.includes(queryOrgId)) {\n      organizationId = queryOrgId\n    }\n  }\n\n  let actorUserId: string | undefined = canViewTenant ? undefined : auth.sub\n  let actorUserIds: string[] | undefined\n  if (canViewTenant && actorQuery) {\n    const parsedActorUserIds = splitCsv(actorQuery)\n    if (parsedActorUserIds.length === 1) {\n      actorUserId = parsedActorUserIds[0]\n    } else if (parsedActorUserIds.length > 1) {\n      actorUserId = undefined\n      actorUserIds = parsedActorUserIds\n    }\n  }\n\n  let entriesResult: Awaited<ReturnType<ActionLogService['list']>>\n  try {\n    entriesResult = await actionLogs.list({\n      tenantId: auth.tenantId ?? undefined,\n      organizationId: organizationId ?? undefined,\n      actorUserId,\n      actorUserIds,\n      resourceKind,\n      resourceId,\n      actionTypes,\n      fieldNames,\n      includeRelated,\n      undoableOnly,\n      sortField,\n      sortDir,\n      limit,\n      before,\n      after,\n    })\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 })\n    }\n    throw err\n  }\n  const entries = entriesResult.items\n\n  const displayMaps = await loadAuditLogDisplayMaps(em, {\n    userIds: entries.map((entry: any) => entry.actorUserId).filter((value: any): value is string => Boolean(value)),\n    tenantIds: entries.map((entry: any) => entry.tenantId).filter((value: any): value is string => Boolean(value)),\n    organizationIds: entries.map((entry: any) => entry.organizationId).filter((value: any): value is string => Boolean(value)),\n  })\n\n  const rows = entries.flatMap((entry: any) => {\n    const actionType = deriveActionLogActionType(entry)\n    const actionLabel = actionType === 'system'\n      ? entry.actionLabel ?? 'System'\n      : actionType.charAt(0).toUpperCase() + actionType.slice(1)\n    const baseRow = {\n      when: entry.createdAt?.toISOString?.() ?? '',\n      user: entry.actorUserId ? displayMaps.users[entry.actorUserId] ?? entry.actorUserId : 'System',\n      action: actionLabel,\n      source: deriveActionLogSource(entry.contextJson, entry.actorUserId).toUpperCase(),\n    }\n    const changes = extractChangeRows(entry.changesJson, entry.snapshotBefore)\n\n    if (changes.length === 0) {\n      return [{\n        ...baseRow,\n        field: '',\n        oldValue: '',\n        newValue: '',\n      }]\n    }\n\n    return changes.map((change) => {\n      return {\n        ...baseRow,\n        field: change.field,\n        oldValue: formatValue(change.from),\n        newValue: formatValue(change.to),\n      }\n    })\n  })\n\n  const prepared: PreparedExport = {\n    columns: [\n      { field: 'when', header: 'When' },\n      { field: 'user', header: 'User' },\n      { field: 'action', header: 'Action' },\n      { field: 'field', header: 'Field' },\n      { field: 'oldValue', header: 'Old Value' },\n      { field: 'newValue', header: 'New Value' },\n      { field: 'source', header: 'Source' },\n    ],\n    rows,\n  }\n\n  const serialized = serializeExport(prepared, 'csv')\n  const filename = defaultExportFilename('changelog-export', 'csv')\n\n  return new Response(serialized.body, {\n    headers: {\n      'content-type': serialized.contentType,\n      'content-disposition': `attachment; filename=\"${filename}\"`,\n    },\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Export action audit logs',\n  description: 'Exports filtered action audit log entries for the current tenant as CSV.',\n  methods: {\n    GET: {\n      summary: 'Export action logs as CSV',\n      description:\n        'Returns a CSV attachment containing filtered action audit log entries. Tenant administrators can widen the scope to other actors or organizations.',\n      query: exportQuerySchema,\n      responses: [\n        { status: 200, description: 'CSV export generated successfully', schema: responseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid filter values', schema: errorSchema },\n        { status: 401, description: 'Authentication required', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB,uBAA4C;AAE5E,SAAS,yBAAyB;AAClC,SAAS,kCAAkC;AAE3C,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,+BAA+B;AAEjC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,qBAAqB;AAC3B,MAAM,cAAc,CAAC,aAAa,QAAQ,UAAU,SAAS,QAAQ;AACrE,MAAM,kBAAkB,CAAC,OAAO,MAAM;AAEtC,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,0CAA0C,EAAE,SAAS;AAAA,EAChG,aAAa,EACV,OAAO,EACP,SAAS,+HAA+H,EACxI,SAAS;AAAA,EACZ,cAAc,EAAE,OAAO,EAAE,SAAS,oDAAoD,EAAE,SAAS;AAAA,EACjG,YAAY,EAAE,OAAO,EAAE,SAAS,qDAAqD,EAAE,SAAS;AAAA,EAChG,YAAY,EACT,OAAO,EACP,SAAS,iHAAiH,EAC1H,SAAS;AAAA,EACZ,WAAW,EACR,OAAO,EACP,SAAS,yGAAyG,EAClH,SAAS;AAAA,EACZ,gBAAgB,EACb,KAAK,CAAC,QAAQ,OAAO,CAAC,EACtB,QAAQ,OAAO,EACf,SAAS,oGAAoG,EAC7G,SAAS;AAAA,EACZ,cAAc,EACX,KAAK,CAAC,QAAQ,OAAO,CAAC,EACtB,QAAQ,OAAO,EACf,SAAS,iDAAiD,EAC1D,SAAS;AAAA,EACZ,OAAO,EAAE,OAAO,EAAE,SAAS,oEAAoE,EAAE,SAAS;AAAA,EAC1G,WAAW,EACR,KAAK,WAAW,EAChB,SAAS,kEAAkE,EAC3E,SAAS;AAAA,EACZ,SAAS,EACN,KAAK,eAAe,EACpB,SAAS,kCAAkC,EAC3C,SAAS;AAAA,EACZ,QAAQ,EAAE,OAAO,EAAE,SAAS,uDAAuD,EAAE,SAAS;AAAA,EAC9F,OAAO,EAAE,OAAO,EAAE,SAAS,sDAAsD,EAAE,SAAS;AAC9F,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,MAAM,EAAE,QAAQ,KAAK;AACvB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,SAAS,SAAS,OAAgC;AAChD,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,SAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACnB;AAEA,SAAS,iBAAiB,OAAsB;AAC9C,SAAO,SAAS,KAAK,EAAE;AAAA,IAAO,CAAC,UAC7B,mBAAmB,SAAS,KAA4C;AAAA,EAC1E;AACF;AAEA,SAAS,WAAW,OAA8B;AAChD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC,GAAG,GAAI;AACtD;AAEA,SAAS,UAAU,OAAwC;AACzD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,YAAY,KAAK,MAAM,KAAK;AAClC,MAAI,OAAO,MAAM,SAAS,EAAG,QAAO;AACpC,SAAO,IAAI,KAAK,SAAS;AAC3B;AAEA,SAAS,YAAY,OAAwB;AAC3C,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,UAAU,YAAY,KAAK,CAAC,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AACnG,MAAI,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,KAAK;AAC1D,SAAO,OAAO,KAAK;AACrB;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3H,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,aAAa,UAAU,QAAQ,kBAAkB;AACvD,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,gBAAgB,MAAM,KAAK;AAAA,IAC/B,KAAK;AAAA,IACL,CAAC,wBAAwB;AAAA,IACzB,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,yBAAyB,KAAK;AAAA,EACnF;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,aAAa,IAAI,aAAa,IAAI,gBAAgB;AACxD,QAAM,aAAa,IAAI,aAAa,IAAI,aAAa;AACrD,QAAM,eAAe,IAAI,aAAa,IAAI,cAAc,KAAK;AAC7D,QAAM,aAAa,IAAI,aAAa,IAAI,YAAY,KAAK;AACzD,QAAM,cAAc,iBAAiB,IAAI,aAAa,IAAI,YAAY,CAAC;AACvE,QAAM,aAAa,SAAS,IAAI,aAAa,IAAI,WAAW,CAAC;AAC7D,QAAM,iBAAiB,kBAAkB,IAAI,aAAa,IAAI,gBAAgB,CAAC,MAAM;AACrF,QAAM,eAAe,kBAAkB,IAAI,aAAa,IAAI,cAAc,CAAC,MAAM;AACjF,QAAM,QAAQ,WAAW,IAAI,aAAa,IAAI,OAAO,CAAC;AACtD,QAAM,YAAY,YAAY,KAAK,CAAC,UAAU,UAAU,IAAI,aAAa,IAAI,WAAW,CAAC,KAAK;AAC9F,QAAM,UAAU,gBAAgB,KAAK,CAAC,UAAU,UAAU,IAAI,aAAa,IAAI,SAAS,CAAC,KAAK;AAC9F,QAAM,SAAS,UAAU,IAAI,aAAa,IAAI,QAAQ,CAAC;AACvD,QAAM,QAAQ,UAAU,IAAI,aAAa,IAAI,OAAO,CAAC;AAErD,MAAI,iBAAiB;AACrB,MAAI,YAAY;AACd,QAAI,MAAM,eAAe,QAAQ,MAAM,WAAW,SAAS,UAAU,GAAG;AACtE,uBAAiB;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,cAAkC,gBAAgB,SAAY,KAAK;AACvE,MAAI;AACJ,MAAI,iBAAiB,YAAY;AAC/B,UAAM,qBAAqB,SAAS,UAAU;AAC9C,QAAI,mBAAmB,WAAW,GAAG;AACnC,oBAAc,mBAAmB,CAAC;AAAA,IACpC,WAAW,mBAAmB,SAAS,GAAG;AACxC,oBAAc;AACd,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,oBAAgB,MAAM,WAAW,KAAK;AAAA,MACpC,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,kBAAkB;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AACA,UAAM;AAAA,EACR;AACA,QAAM,UAAU,cAAc;AAE9B,QAAM,cAAc,MAAM,wBAAwB,IAAI;AAAA,IACpD,SAAS,QAAQ,IAAI,CAAC,UAAe,MAAM,WAAW,EAAE,OAAO,CAAC,UAAgC,QAAQ,KAAK,CAAC;AAAA,IAC9G,WAAW,QAAQ,IAAI,CAAC,UAAe,MAAM,QAAQ,EAAE,OAAO,CAAC,UAAgC,QAAQ,KAAK,CAAC;AAAA,IAC7G,iBAAiB,QAAQ,IAAI,CAAC,UAAe,MAAM,cAAc,EAAE,OAAO,CAAC,UAAgC,QAAQ,KAAK,CAAC;AAAA,EAC3H,CAAC;AAED,QAAM,OAAO,QAAQ,QAAQ,CAAC,UAAe;AAC3C,UAAM,aAAa,0BAA0B,KAAK;AAClD,UAAM,cAAc,eAAe,WAC/B,MAAM,eAAe,WACrB,WAAW,OAAO,CAAC,EAAE,YAAY,IAAI,WAAW,MAAM,CAAC;AAC3D,UAAM,UAAU;AAAA,MACd,MAAM,MAAM,WAAW,cAAc,KAAK;AAAA,MAC1C,MAAM,MAAM,cAAc,YAAY,MAAM,MAAM,WAAW,KAAK,MAAM,cAAc;AAAA,MACtF,QAAQ;AAAA,MACR,QAAQ,sBAAsB,MAAM,aAAa,MAAM,WAAW,EAAE,YAAY;AAAA,IAClF;AACA,UAAM,UAAU,kBAAkB,MAAM,aAAa,MAAM,cAAc;AAEzE,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,CAAC;AAAA,QACN,GAAG;AAAA,QACH,OAAO;AAAA,QACP,UAAU;AAAA,QACV,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,IAAI,CAAC,WAAW;AAC7B,aAAO;AAAA,QACL,GAAG;AAAA,QACH,OAAO,OAAO;AAAA,QACd,UAAU,YAAY,OAAO,IAAI;AAAA,QACjC,UAAU,YAAY,OAAO,EAAE;AAAA,MACjC;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAED,QAAM,WAA2B;AAAA,IAC/B,SAAS;AAAA,MACP,EAAE,OAAO,QAAQ,QAAQ,OAAO;AAAA,MAChC,EAAE,OAAO,QAAQ,QAAQ,OAAO;AAAA,MAChC,EAAE,OAAO,UAAU,QAAQ,SAAS;AAAA,MACpC,EAAE,OAAO,SAAS,QAAQ,QAAQ;AAAA,MAClC,EAAE,OAAO,YAAY,QAAQ,YAAY;AAAA,MACzC,EAAE,OAAO,YAAY,QAAQ,YAAY;AAAA,MACzC,EAAE,OAAO,UAAU,QAAQ,SAAS;AAAA,IACtC;AAAA,IACA;AAAA,EACF;AAEA,QAAM,aAAa,gBAAgB,UAAU,KAAK;AAClD,QAAM,WAAW,sBAAsB,oBAAoB,KAAK;AAEhE,SAAO,IAAI,SAAS,WAAW,MAAM;AAAA,IACnC,SAAS;AAAA,MACP,gBAAgB,WAAW;AAAA,MAC3B,uBAAuB,yBAAyB,QAAQ;AAAA,IAC1D;AAAA,EACF,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,eAAe;AAAA,MAC1F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { defaultExportFilename, serializeExport, type PreparedExport } from '@open-mercato/shared/lib/crud/exporters'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { resolveFeatureCheckContext } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { extractChangeRows } from '@open-mercato/core/modules/audit_logs/lib/changeRows'\nimport {\n  ACTION_LOG_FILTER_TYPES,\n  deriveActionLogActionType,\n  deriveActionLogSource,\n} from '@open-mercato/core/modules/audit_logs/lib/projections'\nimport { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'\nimport { loadAuditLogDisplayMaps } from '../../display'\nimport { requireResolvedTenantScope } from '../../readScope'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['audit_logs.view_self'] },\n}\n\nconst ACTION_TYPE_TOKENS = ACTION_LOG_FILTER_TYPES\nconst SORT_FIELDS = ['createdAt', 'user', 'action', 'field', 'source'] as const\nconst SORT_DIRECTIONS = ['asc', 'desc'] as const\n\nconst exportQuerySchema = z.object({\n  organizationId: z.string().uuid().describe('Limit results to a specific organization').optional(),\n  actorUserId: z\n    .string()\n    .describe('Filter logs created by specific actor IDs (tenant administrators only). Accepts a single UUID or a comma-separated UUID list.')\n    .optional(),\n  resourceKind: z.string().describe('Filter by resource kind (e.g., \"order\", \"product\")').optional(),\n  resourceId: z.string().describe('Filter by resource ID (UUID of the specific record)').optional(),\n  actionType: z\n    .string()\n    .describe('Filter by action type (`create`, `edit`, `delete`, `assign`). Accepts a single value or a comma-separated list.')\n    .optional(),\n  fieldName: z\n    .string()\n    .describe('Filter to entries where the given field changed. Accepts a single field name or a comma-separated list.')\n    .optional(),\n  includeRelated: z\n    .enum(['true', 'false'])\n    .default('false')\n    .describe('When `true`, also returns changes to child entities linked via parentResourceKind/parentResourceId')\n    .optional(),\n  undoableOnly: z\n    .enum(['true', 'false'])\n    .default('false')\n    .describe('When `true`, only undoable actions are returned')\n    .optional(),\n  limit: z.string().describe('Maximum number of records to export (default 1000, capped at 1000)').optional(),\n  sortField: z\n    .enum(SORT_FIELDS)\n    .describe('Sort field: `createdAt`, `user`, `action`, `field`, or `source`.')\n    .optional(),\n  sortDir: z\n    .enum(SORT_DIRECTIONS)\n    .describe('Sort direction: `asc` or `desc`.')\n    .optional(),\n  before: z.string().describe('Return actions created before this ISO-8601 timestamp').optional(),\n  after: z.string().describe('Return actions created after this ISO-8601 timestamp').optional(),\n})\n\nconst responseSchema = z.object({\n  file: z.literal('csv'),\n})\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\nfunction splitCsv(value: string | null): string[] {\n  if (!value) return []\n  return value\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n}\n\nfunction parseActionTypes(param: string | null) {\n  return splitCsv(param).filter((value): value is (typeof ACTION_TYPE_TOKENS)[number] =>\n    ACTION_TYPE_TOKENS.includes(value as (typeof ACTION_TYPE_TOKENS)[number]),\n  )\n}\n\nfunction parseLimit(param: string | null): number {\n  if (!param) return 1000\n  const value = Number(param)\n  if (!Number.isFinite(value)) return 1000\n  return Math.min(Math.max(Math.trunc(value), 1), 1000)\n}\n\nfunction parseDate(value: string | null): Date | undefined {\n  if (!value) return undefined\n  const timestamp = Date.parse(value)\n  if (Number.isNaN(timestamp)) return undefined\n  return new Date(timestamp)\n}\n\nfunction formatValue(value: unknown): string {\n  if (value == null) return ''\n  if (value instanceof Date) return value.toISOString()\n  if (Array.isArray(value)) return value.map((entry) => formatValue(entry)).filter(Boolean).join(', ')\n  if (typeof value === 'object') return JSON.stringify(value)\n  return String(value)\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tenantScopeGuard = requireResolvedTenantScope(auth)\n  if (tenantScopeGuard) return tenantScopeGuard\n\n  const container = await createRequestContainer()\n  const { organizationId: defaultOrganizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req })\n  const rbac = container.resolve('rbacService') as RbacService\n  const actionLogs = container.resolve('actionLogService') as ActionLogService\n  const em = container.resolve('em') as EntityManager\n\n  const canViewTenant = await rbac.userHasAllFeatures(\n    auth.sub,\n    ['audit_logs.view_tenant'],\n    { tenantId: auth.tenantId ?? null, organizationId: defaultOrganizationId ?? null },\n  )\n\n  const url = new URL(req.url)\n  const queryOrgId = url.searchParams.get('organizationId')\n  const actorQuery = url.searchParams.get('actorUserId')\n  const resourceKind = url.searchParams.get('resourceKind') ?? undefined\n  const resourceId = url.searchParams.get('resourceId') ?? undefined\n  const actionTypes = parseActionTypes(url.searchParams.get('actionType'))\n  const fieldNames = splitCsv(url.searchParams.get('fieldName'))\n  const includeRelated = parseBooleanToken(url.searchParams.get('includeRelated')) === true\n  const undoableOnly = parseBooleanToken(url.searchParams.get('undoableOnly')) === true\n  const limit = parseLimit(url.searchParams.get('limit'))\n  const sortField = SORT_FIELDS.find((value) => value === url.searchParams.get('sortField')) ?? 'createdAt'\n  const sortDir = SORT_DIRECTIONS.find((value) => value === url.searchParams.get('sortDir')) ?? 'desc'\n  const before = parseDate(url.searchParams.get('before'))\n  const after = parseDate(url.searchParams.get('after'))\n\n  let organizationId = defaultOrganizationId\n  if (queryOrgId) {\n    if (scope.allowedIds === null || scope.allowedIds.includes(queryOrgId)) {\n      organizationId = queryOrgId\n    }\n  }\n\n  let actorUserId: string | undefined = canViewTenant ? undefined : auth.sub\n  let actorUserIds: string[] | undefined\n  if (canViewTenant && actorQuery) {\n    const parsedActorUserIds = splitCsv(actorQuery)\n    if (parsedActorUserIds.length === 1) {\n      actorUserId = parsedActorUserIds[0]\n    } else if (parsedActorUserIds.length > 1) {\n      actorUserId = undefined\n      actorUserIds = parsedActorUserIds\n    }\n  }\n\n  let entriesResult: Awaited<ReturnType<ActionLogService['list']>>\n  try {\n    entriesResult = await actionLogs.list({\n      tenantId: auth.tenantId ?? undefined,\n      organizationId: organizationId ?? undefined,\n      actorUserId,\n      actorUserIds,\n      resourceKind,\n      resourceId,\n      actionTypes,\n      fieldNames,\n      includeRelated,\n      undoableOnly,\n      sortField,\n      sortDir,\n      limit,\n      before,\n      after,\n    })\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 })\n    }\n    throw err\n  }\n  const entries = entriesResult.items\n\n  const displayMaps = await loadAuditLogDisplayMaps(em, {\n    userIds: entries.map((entry: any) => entry.actorUserId).filter((value: any): value is string => Boolean(value)),\n    tenantIds: entries.map((entry: any) => entry.tenantId).filter((value: any): value is string => Boolean(value)),\n    organizationIds: entries.map((entry: any) => entry.organizationId).filter((value: any): value is string => Boolean(value)),\n  })\n\n  const rows = entries.flatMap((entry: any) => {\n    const actionType = deriveActionLogActionType(entry)\n    const actionLabel = actionType === 'system'\n      ? entry.actionLabel ?? 'System'\n      : actionType.charAt(0).toUpperCase() + actionType.slice(1)\n    const baseRow = {\n      when: entry.createdAt?.toISOString?.() ?? '',\n      user: entry.actorUserId ? displayMaps.users[entry.actorUserId] ?? entry.actorUserId : 'System',\n      action: actionLabel,\n      source: deriveActionLogSource(entry.contextJson, entry.actorUserId).toUpperCase(),\n    }\n    const changes = extractChangeRows(entry.changesJson, entry.snapshotBefore)\n\n    if (changes.length === 0) {\n      return [{\n        ...baseRow,\n        field: '',\n        oldValue: '',\n        newValue: '',\n      }]\n    }\n\n    return changes.map((change) => {\n      return {\n        ...baseRow,\n        field: change.field,\n        oldValue: formatValue(change.from),\n        newValue: formatValue(change.to),\n      }\n    })\n  })\n\n  const prepared: PreparedExport = {\n    columns: [\n      { field: 'when', header: 'When' },\n      { field: 'user', header: 'User' },\n      { field: 'action', header: 'Action' },\n      { field: 'field', header: 'Field' },\n      { field: 'oldValue', header: 'Old Value' },\n      { field: 'newValue', header: 'New Value' },\n      { field: 'source', header: 'Source' },\n    ],\n    rows,\n  }\n\n  const serialized = serializeExport(prepared, 'csv')\n  const filename = defaultExportFilename('changelog-export', 'csv')\n\n  return new Response(serialized.body, {\n    headers: {\n      'content-type': serialized.contentType,\n      'content-disposition': `attachment; filename=\"${filename}\"`,\n    },\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'Export action audit logs',\n  description: 'Exports filtered action audit log entries for the current tenant as CSV.',\n  methods: {\n    GET: {\n      summary: 'Export action logs as CSV',\n      description:\n        'Returns a CSV attachment containing filtered action audit log entries. Tenant administrators can widen the scope to other actors or organizations.',\n      query: exportQuerySchema,\n      responses: [\n        { status: 200, description: 'CSV export generated successfully', schema: responseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid filter values', schema: errorSchema },\n        { status: 401, description: 'Authentication required', schema: errorSchema },\n        { status: 403, description: 'Caller has no resolved tenant scope and is not a superadmin', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAElB,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,uBAAuB,uBAA4C;AAE5E,SAAS,yBAAyB;AAClC,SAAS,kCAAkC;AAE3C,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,+BAA+B;AACxC,SAAS,kCAAkC;AAEpC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,qBAAqB;AAC3B,MAAM,cAAc,CAAC,aAAa,QAAQ,UAAU,SAAS,QAAQ;AACrE,MAAM,kBAAkB,CAAC,OAAO,MAAM;AAEtC,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,0CAA0C,EAAE,SAAS;AAAA,EAChG,aAAa,EACV,OAAO,EACP,SAAS,+HAA+H,EACxI,SAAS;AAAA,EACZ,cAAc,EAAE,OAAO,EAAE,SAAS,oDAAoD,EAAE,SAAS;AAAA,EACjG,YAAY,EAAE,OAAO,EAAE,SAAS,qDAAqD,EAAE,SAAS;AAAA,EAChG,YAAY,EACT,OAAO,EACP,SAAS,iHAAiH,EAC1H,SAAS;AAAA,EACZ,WAAW,EACR,OAAO,EACP,SAAS,yGAAyG,EAClH,SAAS;AAAA,EACZ,gBAAgB,EACb,KAAK,CAAC,QAAQ,OAAO,CAAC,EACtB,QAAQ,OAAO,EACf,SAAS,oGAAoG,EAC7G,SAAS;AAAA,EACZ,cAAc,EACX,KAAK,CAAC,QAAQ,OAAO,CAAC,EACtB,QAAQ,OAAO,EACf,SAAS,iDAAiD,EAC1D,SAAS;AAAA,EACZ,OAAO,EAAE,OAAO,EAAE,SAAS,oEAAoE,EAAE,SAAS;AAAA,EAC1G,WAAW,EACR,KAAK,WAAW,EAChB,SAAS,kEAAkE,EAC3E,SAAS;AAAA,EACZ,SAAS,EACN,KAAK,eAAe,EACpB,SAAS,kCAAkC,EAC3C,SAAS;AAAA,EACZ,QAAQ,EAAE,OAAO,EAAE,SAAS,uDAAuD,EAAE,SAAS;AAAA,EAC9F,OAAO,EAAE,OAAO,EAAE,SAAS,sDAAsD,EAAE,SAAS;AAC9F,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,MAAM,EAAE,QAAQ,KAAK;AACvB,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,SAAS,SAAS,OAAgC;AAChD,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,SAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACnB;AAEA,SAAS,iBAAiB,OAAsB;AAC9C,SAAO,SAAS,KAAK,EAAE;AAAA,IAAO,CAAC,UAC7B,mBAAmB,SAAS,KAA4C;AAAA,EAC1E;AACF;AAEA,SAAS,WAAW,OAA8B;AAChD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC,GAAG,GAAI;AACtD;AAEA,SAAS,UAAU,OAAwC;AACzD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,YAAY,KAAK,MAAM,KAAK;AAClC,MAAI,OAAO,MAAM,SAAS,EAAG,QAAO;AACpC,SAAO,IAAI,KAAK,SAAS;AAC3B;AAEA,SAAS,YAAY,OAAwB;AAC3C,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,iBAAiB,KAAM,QAAO,MAAM,YAAY;AACpD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,UAAU,YAAY,KAAK,CAAC,EAAE,OAAO,OAAO,EAAE,KAAK,IAAI;AACnG,MAAI,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,KAAK;AAC1D,SAAO,OAAO,KAAK;AACrB;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,mBAAmB,2BAA2B,IAAI;AACxD,MAAI,iBAAkB,QAAO;AAE7B,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAC3H,QAAM,OAAO,UAAU,QAAQ,aAAa;AAC5C,QAAM,aAAa,UAAU,QAAQ,kBAAkB;AACvD,QAAM,KAAK,UAAU,QAAQ,IAAI;AAEjC,QAAM,gBAAgB,MAAM,KAAK;AAAA,IAC/B,KAAK;AAAA,IACL,CAAC,wBAAwB;AAAA,IACzB,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,yBAAyB,KAAK;AAAA,EACnF;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,aAAa,IAAI,aAAa,IAAI,gBAAgB;AACxD,QAAM,aAAa,IAAI,aAAa,IAAI,aAAa;AACrD,QAAM,eAAe,IAAI,aAAa,IAAI,cAAc,KAAK;AAC7D,QAAM,aAAa,IAAI,aAAa,IAAI,YAAY,KAAK;AACzD,QAAM,cAAc,iBAAiB,IAAI,aAAa,IAAI,YAAY,CAAC;AACvE,QAAM,aAAa,SAAS,IAAI,aAAa,IAAI,WAAW,CAAC;AAC7D,QAAM,iBAAiB,kBAAkB,IAAI,aAAa,IAAI,gBAAgB,CAAC,MAAM;AACrF,QAAM,eAAe,kBAAkB,IAAI,aAAa,IAAI,cAAc,CAAC,MAAM;AACjF,QAAM,QAAQ,WAAW,IAAI,aAAa,IAAI,OAAO,CAAC;AACtD,QAAM,YAAY,YAAY,KAAK,CAAC,UAAU,UAAU,IAAI,aAAa,IAAI,WAAW,CAAC,KAAK;AAC9F,QAAM,UAAU,gBAAgB,KAAK,CAAC,UAAU,UAAU,IAAI,aAAa,IAAI,SAAS,CAAC,KAAK;AAC9F,QAAM,SAAS,UAAU,IAAI,aAAa,IAAI,QAAQ,CAAC;AACvD,QAAM,QAAQ,UAAU,IAAI,aAAa,IAAI,OAAO,CAAC;AAErD,MAAI,iBAAiB;AACrB,MAAI,YAAY;AACd,QAAI,MAAM,eAAe,QAAQ,MAAM,WAAW,SAAS,UAAU,GAAG;AACtE,uBAAiB;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,cAAkC,gBAAgB,SAAY,KAAK;AACvE,MAAI;AACJ,MAAI,iBAAiB,YAAY;AAC/B,UAAM,qBAAqB,SAAS,UAAU;AAC9C,QAAI,mBAAmB,WAAW,GAAG;AACnC,oBAAc,mBAAmB,CAAC;AAAA,IACpC,WAAW,mBAAmB,SAAS,GAAG;AACxC,oBAAc;AACd,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,oBAAgB,MAAM,WAAW,KAAK;AAAA,MACpC,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,kBAAkB;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AACA,UAAM;AAAA,EACR;AACA,QAAM,UAAU,cAAc;AAE9B,QAAM,cAAc,MAAM,wBAAwB,IAAI;AAAA,IACpD,SAAS,QAAQ,IAAI,CAAC,UAAe,MAAM,WAAW,EAAE,OAAO,CAAC,UAAgC,QAAQ,KAAK,CAAC;AAAA,IAC9G,WAAW,QAAQ,IAAI,CAAC,UAAe,MAAM,QAAQ,EAAE,OAAO,CAAC,UAAgC,QAAQ,KAAK,CAAC;AAAA,IAC7G,iBAAiB,QAAQ,IAAI,CAAC,UAAe,MAAM,cAAc,EAAE,OAAO,CAAC,UAAgC,QAAQ,KAAK,CAAC;AAAA,EAC3H,CAAC;AAED,QAAM,OAAO,QAAQ,QAAQ,CAAC,UAAe;AAC3C,UAAM,aAAa,0BAA0B,KAAK;AAClD,UAAM,cAAc,eAAe,WAC/B,MAAM,eAAe,WACrB,WAAW,OAAO,CAAC,EAAE,YAAY,IAAI,WAAW,MAAM,CAAC;AAC3D,UAAM,UAAU;AAAA,MACd,MAAM,MAAM,WAAW,cAAc,KAAK;AAAA,MAC1C,MAAM,MAAM,cAAc,YAAY,MAAM,MAAM,WAAW,KAAK,MAAM,cAAc;AAAA,MACtF,QAAQ;AAAA,MACR,QAAQ,sBAAsB,MAAM,aAAa,MAAM,WAAW,EAAE,YAAY;AAAA,IAClF;AACA,UAAM,UAAU,kBAAkB,MAAM,aAAa,MAAM,cAAc;AAEzE,QAAI,QAAQ,WAAW,GAAG;AACxB,aAAO,CAAC;AAAA,QACN,GAAG;AAAA,QACH,OAAO;AAAA,QACP,UAAU;AAAA,QACV,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,WAAO,QAAQ,IAAI,CAAC,WAAW;AAC7B,aAAO;AAAA,QACL,GAAG;AAAA,QACH,OAAO,OAAO;AAAA,QACd,UAAU,YAAY,OAAO,IAAI;AAAA,QACjC,UAAU,YAAY,OAAO,EAAE;AAAA,MACjC;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AAED,QAAM,WAA2B;AAAA,IAC/B,SAAS;AAAA,MACP,EAAE,OAAO,QAAQ,QAAQ,OAAO;AAAA,MAChC,EAAE,OAAO,QAAQ,QAAQ,OAAO;AAAA,MAChC,EAAE,OAAO,UAAU,QAAQ,SAAS;AAAA,MACpC,EAAE,OAAO,SAAS,QAAQ,QAAQ;AAAA,MAClC,EAAE,OAAO,YAAY,QAAQ,YAAY;AAAA,MACzC,EAAE,OAAO,YAAY,QAAQ,YAAY;AAAA,MACzC,EAAE,OAAO,UAAU,QAAQ,SAAS;AAAA,IACtC;AAAA,IACA;AAAA,EACF;AAEA,QAAM,aAAa,gBAAgB,UAAU,KAAK;AAClD,QAAM,WAAW,sBAAsB,oBAAoB,KAAK;AAEhE,SAAO,IAAI,SAAS,WAAW,MAAM;AAAA,IACnC,SAAS;AAAA,MACP,gBAAgB,WAAW;AAAA,MAC3B,uBAAuB,yBAAyB,QAAQ;AAAA,IAC1D;AAAA,EACF,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qCAAqC,QAAQ,eAAe;AAAA,MAC1F;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,+DAA+D,QAAQ,YAAY;AAAA,MACjH;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/audit_logs/api/audit-logs/actions/route.js

@@ -3,6 +3,7 @@ import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
 import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveFeatureCheckContext } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { loadAuditLogDisplayMaps } from "../display.js";
+import { requireResolvedTenantScope } from "../readScope.js";
 import { z } from "zod";
 import { parseBooleanToken } from "@open-mercato/shared/lib/boolean";
 import { ACTION_LOG_FILTER_TYPES } from "@open-mercato/core/modules/audit_logs/lib/projections";
@@ -103,6 +104,8 @@ function parseNumber(param, { min, max, fallback }) {
 async function GET(req) {
   const auth = await getAuthFromRequest(req);
   if (!auth) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  const tenantScopeGuard = requireResolvedTenantScope(auth);
+  if (tenantScopeGuard) return tenantScopeGuard;
   const container = await createRequestContainer();
   const { organizationId: defaultOrganizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req });
   const rbac = container.resolve("rbacService");
@@ -228,7 +231,8 @@ const openApi = {
       ],
       errors: [
         { status: 400, description: "Invalid filter values", schema: errorSchema },
-        { status: 401, description: "Authentication required", schema: errorSchema }
+        { status: 401, description: "Authentication required", schema: errorSchema },
+        { status: 403, description: "Caller has no resolved tenant scope and is not a superadmin", schema: errorSchema }
       ]
     }
   }

package/dist/modules/audit_logs/api/audit-logs/actions/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/audit_logs/api/audit-logs/actions/route.ts"],
-  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveFeatureCheckContext } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { loadAuditLogDisplayMaps } from '../display'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { ACTION_LOG_FILTER_TYPES } from '@open-mercato/core/modules/audit_logs/lib/projections'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['audit_logs.view_self'] },\n}\n\nconst ACTION_TYPE_TOKENS = ACTION_LOG_FILTER_TYPES\nconst SORT_FIELDS = ['createdAt', 'user', 'action', 'field', 'source'] as const\nconst SORT_DIRECTIONS = ['asc', 'desc'] as const\n\nconst auditActionQuerySchema = z.object({\n  organizationId: z.string().uuid().describe('Limit results to a specific organization').optional(),\n  actorUserId: z\n    .string()\n    .describe('Filter logs created by specific actor IDs (tenant administrators only). Accepts a single UUID or a comma-separated UUID list.')\n    .optional(),\n  resourceKind: z.string().describe('Filter by resource kind (e.g., \"order\", \"product\")').optional(),\n  resourceId: z.string().describe('Filter by resource ID (UUID of the specific record)').optional(),\n  actionType: z\n    .string()\n    .describe('Filter by action type (`create`, `edit`, `delete`, `assign`). Accepts a single value or a comma-separated list.')\n    .optional(),\n  fieldName: z\n    .string()\n    .describe('Filter to entries where the given field changed. Accepts a single field name or a comma-separated list.')\n    .optional(),\n  includeRelated: z\n    .enum(['true', 'false'])\n    .default('false')\n    .describe('When `true`, also returns changes to child entities linked via parentResourceKind/parentResourceId')\n    .optional(),\n  includeTotal: z\n    .enum(['true', 'false'])\n    .default('false')\n    .describe('When `true`, the response includes the filtered total count.')\n    .optional(),\n  undoableOnly: z\n    .enum(['true', 'false'])\n    .default('false')\n    .describe('When `true`, only undoable actions are returned')\n    .optional(),\n  limit: z.string().describe('Maximum number of records to return (default 50, max 1000)').optional(),\n  offset: z.string().describe('Zero-based record offset for pagination (legacy \u2014 prefer page/pageSize)').optional(),\n  page: z.string().describe('Page number (default 1)').optional(),\n  pageSize: z.string().describe('Page size (default 50, max 200)').optional(),\n  sortField: z\n    .enum(SORT_FIELDS)\n    .describe('Sort field: `createdAt`, `user`, `action`, `field`, or `source`.')\n    .optional(),\n  sortDir: z\n    .enum(SORT_DIRECTIONS)\n    .describe('Sort direction: `asc` or `desc`.')\n    .optional(),\n  before: z.string().describe('Return actions created before this ISO-8601 timestamp').optional(),\n  after: z.string().describe('Return actions created after this ISO-8601 timestamp').optional(),\n})\n\nconst auditActionItemSchema = z.object({\n  id: z.string(),\n  commandId: z.string(),\n  actionLabel: z.string().nullable(),\n  executionState: z.enum(['done', 'undone', 'failed', 'redone']),\n  actorUserId: z.string().uuid().nullable(),\n  actorUserName: z.string().nullable(),\n  tenantId: z.string().uuid().nullable(),\n  tenantName: z.string().nullable(),\n  organizationId: z.string().uuid().nullable(),\n  organizationName: z.string().nullable(),\n  resourceKind: z.string().nullable(),\n  resourceId: z.string().nullable(),\n  parentResourceKind: z.string().nullable().optional(),\n  parentResourceId: z.string().nullable().optional(),\n  undoToken: z.string().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n  snapshotBefore: z.unknown().nullable(),\n  snapshotAfter: z.unknown().nullable(),\n  changes: z.record(z.string(), z.unknown()).nullable(),\n  context: z.record(z.string(), z.unknown()).nullable(),\n})\n\nconst auditActionResponseSchema = z.object({\n  items: z.array(auditActionItemSchema),\n  canViewTenant: z.boolean(),\n  page: z.number().int(),\n  pageSize: z.number().int(),\n  total: z.number().int(),\n  totalPages: z.number().int(),\n})\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\nfunction parseDate(value: string | null): Date | undefined {\n  if (!value) return undefined\n  const ts = Date.parse(value)\n  if (Number.isNaN(ts)) return undefined\n  return new Date(ts)\n}\n\nfunction parseLimit(param: string | null): number {\n  if (!param) return 50\n  const value = Number(param)\n  if (!Number.isFinite(value)) return 50\n  return Math.min(Math.max(Math.trunc(value), 1), 1000)\n}\n\nfunction parseOffset(param: string | null): number {\n  if (!param) return 0\n  const value = Number(param)\n  if (!Number.isFinite(value)) return 0\n  return Math.max(Math.trunc(value), 0)\n}\n\nfunction splitCsv(value: string | null): string[] {\n  if (!value) return []\n  return value\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n}\n\nfunction parseActionTypes(param: string | null) {\n  return splitCsv(param).filter((value): value is (typeof ACTION_TYPE_TOKENS)[number] =>\n    ACTION_TYPE_TOKENS.includes(value as (typeof ACTION_TYPE_TOKENS)[number]),\n  )\n}\n\nfunction parseNumber(param: string | null, { min, max, fallback }: { min: number; max: number; fallback: number }) {\n  if (!param) return fallback\n  const value = Number(param)\n  if (!Number.isFinite(value)) return fallback\n  const normalized = Math.trunc(value)\n  if (Number.isNaN(normalized)) return fallback\n  return Math.min(Math.max(normalized, min), max)\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const container = await createRequestContainer()\n  const { organizationId: defaultOrganizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req })\n\n  const rbac = (container.resolve('rbacService') as RbacService)\n  const actionLogs = (container.resolve('actionLogService') as ActionLogService)\n  const em = (container.resolve('em') as EntityManager)\n\n  const canViewTenant = await rbac.userHasAllFeatures(\n    auth.sub,\n    ['audit_logs.view_tenant'],\n    { tenantId: auth.tenantId ?? null, organizationId: defaultOrganizationId ?? null },\n  )\n\n  const url = new URL(req.url)\n  const queryOrgId = url.searchParams.get('organizationId')\n  const actorQuery = url.searchParams.get('actorUserId')\n  const resourceKind = url.searchParams.get('resourceKind') ?? undefined\n  const resourceId = url.searchParams.get('resourceId') ?? undefined\n  const actionTypes = parseActionTypes(url.searchParams.get('actionType'))\n  const fieldNames = splitCsv(url.searchParams.get('fieldName'))\n  const includeRelated = parseBooleanToken(url.searchParams.get('includeRelated')) === true\n  const includeTotal = parseBooleanToken(url.searchParams.get('includeTotal')) === true\n  const undoableOnly = parseBooleanToken(url.searchParams.get('undoableOnly')) === true\n  const limit = parseLimit(url.searchParams.get('limit'))\n  const offset = parseOffset(url.searchParams.get('offset'))\n  const page = parseNumber(url.searchParams.get('page'), { min: 1, max: 1000000, fallback: 1 })\n  const pageSize = parseNumber(url.searchParams.get('pageSize'), { min: 1, max: 200, fallback: 50 })\n  const sortField = SORT_FIELDS.find((value) => value === url.searchParams.get('sortField')) ?? 'createdAt'\n  const sortDir = SORT_DIRECTIONS.find((value) => value === url.searchParams.get('sortDir')) ?? 'desc'\n  const before = parseDate(url.searchParams.get('before'))\n  const after = parseDate(url.searchParams.get('after'))\n\n  let organizationId = defaultOrganizationId\n  if (queryOrgId) {\n    if (scope.allowedIds === null || scope.allowedIds.includes(queryOrgId)) {\n      organizationId = queryOrgId\n    }\n  }\n\n  let actorUserId: string | undefined = canViewTenant ? undefined : auth.sub\n  let actorUserIds: string[] | undefined\n  if (canViewTenant && actorQuery) {\n    const parsedActorUserIds = splitCsv(actorQuery)\n    if (parsedActorUserIds.length === 1) {\n      actorUserId = parsedActorUserIds[0]\n    } else if (parsedActorUserIds.length > 1) {\n      actorUserId = undefined\n      actorUserIds = parsedActorUserIds\n    }\n  }\n\n  const listQuery = {\n    tenantId: auth.tenantId ?? undefined,\n    organizationId: organizationId ?? undefined,\n    actorUserId,\n    actorUserIds,\n    resourceKind,\n    resourceId,\n    actionTypes,\n    fieldNames,\n    includeRelated,\n    undoableOnly,\n    sortField,\n    sortDir,\n    limit,\n    offset,\n    page,\n    pageSize,\n    before,\n    after,\n  }\n\n  // includeTotal flag is retained for backward compatibility but page-based pagination\n  // always returns total/totalPages from the list query's findAndCount.\n  void includeTotal\n  let list: Awaited<ReturnType<ActionLogService['list']>>\n  try {\n    list = await actionLogs.list(listQuery)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 })\n    }\n    throw err\n  }\n\n  const displayMaps = await loadAuditLogDisplayMaps(em, {\n    userIds: list.items.map((entry: any) => entry.actorUserId).filter((value: any): value is string => !!value),\n    tenantIds: list.items.map((entry: any) => entry.tenantId).filter((value: any): value is string => !!value),\n    organizationIds: list.items.map((entry: any) => entry.organizationId).filter((value: any): value is string => !!value),\n  })\n\n  const items = list.items.map((entry: any) => ({\n    id: entry.id,\n    commandId: entry.commandId,\n    actionLabel: entry.actionLabel,\n    executionState: entry.executionState,\n    actorUserId: entry.actorUserId,\n    actorUserName: entry.actorUserId ? displayMaps.users[entry.actorUserId] ?? null : null,\n    tenantId: entry.tenantId,\n    tenantName: entry.tenantId ? displayMaps.tenants[entry.tenantId] ?? null : null,\n    organizationId: entry.organizationId,\n    organizationName: entry.organizationId ? displayMaps.organizations[entry.organizationId] ?? null : null,\n    resourceKind: entry.resourceKind,\n    resourceId: entry.resourceId,\n    parentResourceKind: entry.parentResourceKind,\n    parentResourceId: entry.parentResourceId,\n    undoToken: entry.undoToken,\n    createdAt: entry.createdAt?.toISOString?.() ?? entry.createdAt,\n    updatedAt: entry.updatedAt?.toISOString?.() ?? entry.updatedAt,\n    snapshotBefore: entry.snapshotBefore,\n    snapshotAfter: entry.snapshotAfter,\n    changes: entry.changesJson,\n    context: entry.contextJson,\n  }))\n\n  return NextResponse.json({\n    items,\n    canViewTenant,\n    page: list.page,\n    pageSize: list.pageSize,\n    total: list.total,\n    totalPages: list.totalPages,\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'List action audit logs',\n  description: 'Retrieve recent state-changing actions with undo/redo metadata for the current tenant.',\n  methods: {\n    GET: {\n      summary: 'Fetch action logs',\n      description:\n        'Returns recent action audit log entries. Tenant administrators can widen the scope to other actors or organizations, and callers can optionally restrict results to undoable actions.',\n      query: auditActionQuerySchema,\n      responses: [\n        { status: 200, description: 'Action logs retrieved successfully', schema: auditActionResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid filter values', schema: errorSchema },\n        { status: 401, description: 'Authentication required', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,kCAAkC;AAI3C,SAAS,+BAA+B;AACxC,SAAS,SAAS;AAElB,SAAS,yBAAyB;AAClC,SAAS,+BAA+B;AAEjC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,qBAAqB;AAC3B,MAAM,cAAc,CAAC,aAAa,QAAQ,UAAU,SAAS,QAAQ;AACrE,MAAM,kBAAkB,CAAC,OAAO,MAAM;AAEtC,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,0CAA0C,EAAE,SAAS;AAAA,EAChG,aAAa,EACV,OAAO,EACP,SAAS,+HAA+H,EACxI,SAAS;AAAA,EACZ,cAAc,EAAE,OAAO,EAAE,SAAS,oDAAoD,EAAE,SAAS;AAAA,EACjG,YAAY,EAAE,OAAO,EAAE,SAAS,qDAAqD,EAAE,SAAS;AAAA,EAChG,YAAY,EACT,OAAO,EACP,SAAS,iHAAiH,EAC1H,SAAS;AAAA,EACZ,WAAW,EACR,OAAO,EACP,SAAS,yGAAyG,EAClH,SAAS;AAAA,EACZ,gBAAgB,EACb,KAAK,CAAC,QAAQ,OAAO,CAAC,EACtB,QAAQ,OAAO,EACf,SAAS,oGAAoG,EAC7G,SAAS;AAAA,EACZ,cAAc,EACX,KAAK,CAAC,QAAQ,OAAO,CAAC,EACtB,QAAQ,OAAO,EACf,SAAS,8DAA8D,EACvE,SAAS;AAAA,EACZ,cAAc,EACX,KAAK,CAAC,QAAQ,OAAO,CAAC,EACtB,QAAQ,OAAO,EACf,SAAS,iDAAiD,EAC1D,SAAS;AAAA,EACZ,OAAO,EAAE,OAAO,EAAE,SAAS,4DAA4D,EAAE,SAAS;AAAA,EAClG,QAAQ,EAAE,OAAO,EAAE,SAAS,8EAAyE,EAAE,SAAS;AAAA,EAChH,MAAM,EAAE,OAAO,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAC9D,UAAU,EAAE,OAAO,EAAE,SAAS,iCAAiC,EAAE,SAAS;AAAA,EAC1E,WAAW,EACR,KAAK,WAAW,EAChB,SAAS,kEAAkE,EAC3E,SAAS;AAAA,EACZ,SAAS,EACN,KAAK,eAAe,EACpB,SAAS,kCAAkC,EAC3C,SAAS;AAAA,EACZ,QAAQ,EAAE,OAAO,EAAE,SAAS,uDAAuD,EAAE,SAAS;AAAA,EAC9F,OAAO,EAAE,OAAO,EAAE,SAAS,sDAAsD,EAAE,SAAS;AAC9F,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO;AAAA,EACb,WAAW,EAAE,OAAO;AAAA,EACpB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,UAAU,UAAU,QAAQ,CAAC;AAAA,EAC7D,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AAAA,EACpB,gBAAgB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACrC,eAAe,EAAE,QAAQ,EAAE,SAAS;AAAA,EACpC,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACtD,CAAC;AAED,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,eAAe,EAAE,QAAQ;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,IAAI;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,IAAI;AAAA,EACzB,OAAO,EAAE,OAAO,EAAE,IAAI;AAAA,EACtB,YAAY,EAAE,OAAO,EAAE,IAAI;AAC7B,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,SAAS,UAAU,OAAwC;AACzD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,KAAK,KAAK,MAAM,KAAK;AAC3B,MAAI,OAAO,MAAM,EAAE,EAAG,QAAO;AAC7B,SAAO,IAAI,KAAK,EAAE;AACpB;AAEA,SAAS,WAAW,OAA8B;AAChD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC,GAAG,GAAI;AACtD;AAEA,SAAS,YAAY,OAA8B;AACjD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC;AACtC;AAEA,SAAS,SAAS,OAAgC;AAChD,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,SAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACnB;AAEA,SAAS,iBAAiB,OAAsB;AAC9C,SAAO,SAAS,KAAK,EAAE;AAAA,IAAO,CAAC,UAC7B,mBAAmB,SAAS,KAA4C;AAAA,EAC1E;AACF;AAEA,SAAS,YAAY,OAAsB,EAAE,KAAK,KAAK,SAAS,GAAmD;AACjH,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,QAAM,aAAa,KAAK,MAAM,KAAK;AACnC,MAAI,OAAO,MAAM,UAAU,EAAG,QAAO;AACrC,SAAO,KAAK,IAAI,KAAK,IAAI,YAAY,GAAG,GAAG,GAAG;AAChD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAE3H,QAAM,OAAQ,UAAU,QAAQ,aAAa;AAC7C,QAAM,aAAc,UAAU,QAAQ,kBAAkB;AACxD,QAAM,KAAM,UAAU,QAAQ,IAAI;AAElC,QAAM,gBAAgB,MAAM,KAAK;AAAA,IAC/B,KAAK;AAAA,IACL,CAAC,wBAAwB;AAAA,IACzB,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,yBAAyB,KAAK;AAAA,EACnF;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,aAAa,IAAI,aAAa,IAAI,gBAAgB;AACxD,QAAM,aAAa,IAAI,aAAa,IAAI,aAAa;AACrD,QAAM,eAAe,IAAI,aAAa,IAAI,cAAc,KAAK;AAC7D,QAAM,aAAa,IAAI,aAAa,IAAI,YAAY,KAAK;AACzD,QAAM,cAAc,iBAAiB,IAAI,aAAa,IAAI,YAAY,CAAC;AACvE,QAAM,aAAa,SAAS,IAAI,aAAa,IAAI,WAAW,CAAC;AAC7D,QAAM,iBAAiB,kBAAkB,IAAI,aAAa,IAAI,gBAAgB,CAAC,MAAM;AACrF,QAAM,eAAe,kBAAkB,IAAI,aAAa,IAAI,cAAc,CAAC,MAAM;AACjF,QAAM,eAAe,kBAAkB,IAAI,aAAa,IAAI,cAAc,CAAC,MAAM;AACjF,QAAM,QAAQ,WAAW,IAAI,aAAa,IAAI,OAAO,CAAC;AACtD,QAAM,SAAS,YAAY,IAAI,aAAa,IAAI,QAAQ,CAAC;AACzD,QAAM,OAAO,YAAY,IAAI,aAAa,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG,KAAK,KAAS,UAAU,EAAE,CAAC;AAC5F,QAAM,WAAW,YAAY,IAAI,aAAa,IAAI,UAAU,GAAG,EAAE,KAAK,GAAG,KAAK,KAAK,UAAU,GAAG,CAAC;AACjG,QAAM,YAAY,YAAY,KAAK,CAAC,UAAU,UAAU,IAAI,aAAa,IAAI,WAAW,CAAC,KAAK;AAC9F,QAAM,UAAU,gBAAgB,KAAK,CAAC,UAAU,UAAU,IAAI,aAAa,IAAI,SAAS,CAAC,KAAK;AAC9F,QAAM,SAAS,UAAU,IAAI,aAAa,IAAI,QAAQ,CAAC;AACvD,QAAM,QAAQ,UAAU,IAAI,aAAa,IAAI,OAAO,CAAC;AAErD,MAAI,iBAAiB;AACrB,MAAI,YAAY;AACd,QAAI,MAAM,eAAe,QAAQ,MAAM,WAAW,SAAS,UAAU,GAAG;AACtE,uBAAiB;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,cAAkC,gBAAgB,SAAY,KAAK;AACvE,MAAI;AACJ,MAAI,iBAAiB,YAAY;AAC/B,UAAM,qBAAqB,SAAS,UAAU;AAC9C,QAAI,mBAAmB,WAAW,GAAG;AACnC,oBAAc,mBAAmB,CAAC;AAAA,IACpC,WAAW,mBAAmB,SAAS,GAAG;AACxC,oBAAc;AACd,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,YAAY;AAAA,IAChB,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,kBAAkB;AAAA,IAClC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAIA,OAAK;AACL,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,WAAW,KAAK,SAAS;AAAA,EACxC,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AACA,UAAM;AAAA,EACR;AAEA,QAAM,cAAc,MAAM,wBAAwB,IAAI;AAAA,IACpD,SAAS,KAAK,MAAM,IAAI,CAAC,UAAe,MAAM,WAAW,EAAE,OAAO,CAAC,UAAgC,CAAC,CAAC,KAAK;AAAA,IAC1G,WAAW,KAAK,MAAM,IAAI,CAAC,UAAe,MAAM,QAAQ,EAAE,OAAO,CAAC,UAAgC,CAAC,CAAC,KAAK;AAAA,IACzG,iBAAiB,KAAK,MAAM,IAAI,CAAC,UAAe,MAAM,cAAc,EAAE,OAAO,CAAC,UAAgC,CAAC,CAAC,KAAK;AAAA,EACvH,CAAC;AAED,QAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,WAAgB;AAAA,IAC5C,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,gBAAgB,MAAM;AAAA,IACtB,aAAa,MAAM;AAAA,IACnB,eAAe,MAAM,cAAc,YAAY,MAAM,MAAM,WAAW,KAAK,OAAO;AAAA,IAClF,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,WAAW,YAAY,QAAQ,MAAM,QAAQ,KAAK,OAAO;AAAA,IAC3E,gBAAgB,MAAM;AAAA,IACtB,kBAAkB,MAAM,iBAAiB,YAAY,cAAc,MAAM,cAAc,KAAK,OAAO;AAAA,IACnG,cAAc,MAAM;AAAA,IACpB,YAAY,MAAM;AAAA,IAClB,oBAAoB,MAAM;AAAA,IAC1B,kBAAkB,MAAM;AAAA,IACxB,WAAW,MAAM;AAAA,IACjB,WAAW,MAAM,WAAW,cAAc,KAAK,MAAM;AAAA,IACrD,WAAW,MAAM,WAAW,cAAc,KAAK,MAAM;AAAA,IACrD,gBAAgB,MAAM;AAAA,IACtB,eAAe,MAAM;AAAA,IACrB,SAAS,MAAM;AAAA,IACf,SAAS,MAAM;AAAA,EACjB,EAAE;AAEF,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA;AAAA,IACA,MAAM,KAAK;AAAA,IACX,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,IACZ,YAAY,KAAK;AAAA,EACnB,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,0BAA0B;AAAA,MACtG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,MAC7E;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveFeatureCheckContext } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'\nimport { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { loadAuditLogDisplayMaps } from '../display'\nimport { requireResolvedTenantScope } from '../readScope'\nimport { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { parseBooleanToken } from '@open-mercato/shared/lib/boolean'\nimport { ACTION_LOG_FILTER_TYPES } from '@open-mercato/core/modules/audit_logs/lib/projections'\n\nexport const metadata = {\n  GET: { requireAuth: true, requireFeatures: ['audit_logs.view_self'] },\n}\n\nconst ACTION_TYPE_TOKENS = ACTION_LOG_FILTER_TYPES\nconst SORT_FIELDS = ['createdAt', 'user', 'action', 'field', 'source'] as const\nconst SORT_DIRECTIONS = ['asc', 'desc'] as const\n\nconst auditActionQuerySchema = z.object({\n  organizationId: z.string().uuid().describe('Limit results to a specific organization').optional(),\n  actorUserId: z\n    .string()\n    .describe('Filter logs created by specific actor IDs (tenant administrators only). Accepts a single UUID or a comma-separated UUID list.')\n    .optional(),\n  resourceKind: z.string().describe('Filter by resource kind (e.g., \"order\", \"product\")').optional(),\n  resourceId: z.string().describe('Filter by resource ID (UUID of the specific record)').optional(),\n  actionType: z\n    .string()\n    .describe('Filter by action type (`create`, `edit`, `delete`, `assign`). Accepts a single value or a comma-separated list.')\n    .optional(),\n  fieldName: z\n    .string()\n    .describe('Filter to entries where the given field changed. Accepts a single field name or a comma-separated list.')\n    .optional(),\n  includeRelated: z\n    .enum(['true', 'false'])\n    .default('false')\n    .describe('When `true`, also returns changes to child entities linked via parentResourceKind/parentResourceId')\n    .optional(),\n  includeTotal: z\n    .enum(['true', 'false'])\n    .default('false')\n    .describe('When `true`, the response includes the filtered total count.')\n    .optional(),\n  undoableOnly: z\n    .enum(['true', 'false'])\n    .default('false')\n    .describe('When `true`, only undoable actions are returned')\n    .optional(),\n  limit: z.string().describe('Maximum number of records to return (default 50, max 1000)').optional(),\n  offset: z.string().describe('Zero-based record offset for pagination (legacy \u2014 prefer page/pageSize)').optional(),\n  page: z.string().describe('Page number (default 1)').optional(),\n  pageSize: z.string().describe('Page size (default 50, max 200)').optional(),\n  sortField: z\n    .enum(SORT_FIELDS)\n    .describe('Sort field: `createdAt`, `user`, `action`, `field`, or `source`.')\n    .optional(),\n  sortDir: z\n    .enum(SORT_DIRECTIONS)\n    .describe('Sort direction: `asc` or `desc`.')\n    .optional(),\n  before: z.string().describe('Return actions created before this ISO-8601 timestamp').optional(),\n  after: z.string().describe('Return actions created after this ISO-8601 timestamp').optional(),\n})\n\nconst auditActionItemSchema = z.object({\n  id: z.string(),\n  commandId: z.string(),\n  actionLabel: z.string().nullable(),\n  executionState: z.enum(['done', 'undone', 'failed', 'redone']),\n  actorUserId: z.string().uuid().nullable(),\n  actorUserName: z.string().nullable(),\n  tenantId: z.string().uuid().nullable(),\n  tenantName: z.string().nullable(),\n  organizationId: z.string().uuid().nullable(),\n  organizationName: z.string().nullable(),\n  resourceKind: z.string().nullable(),\n  resourceId: z.string().nullable(),\n  parentResourceKind: z.string().nullable().optional(),\n  parentResourceId: z.string().nullable().optional(),\n  undoToken: z.string().nullable(),\n  createdAt: z.string(),\n  updatedAt: z.string(),\n  snapshotBefore: z.unknown().nullable(),\n  snapshotAfter: z.unknown().nullable(),\n  changes: z.record(z.string(), z.unknown()).nullable(),\n  context: z.record(z.string(), z.unknown()).nullable(),\n})\n\nconst auditActionResponseSchema = z.object({\n  items: z.array(auditActionItemSchema),\n  canViewTenant: z.boolean(),\n  page: z.number().int(),\n  pageSize: z.number().int(),\n  total: z.number().int(),\n  totalPages: z.number().int(),\n})\n\nconst errorSchema = z.object({\n  error: z.string(),\n})\n\nfunction parseDate(value: string | null): Date | undefined {\n  if (!value) return undefined\n  const ts = Date.parse(value)\n  if (Number.isNaN(ts)) return undefined\n  return new Date(ts)\n}\n\nfunction parseLimit(param: string | null): number {\n  if (!param) return 50\n  const value = Number(param)\n  if (!Number.isFinite(value)) return 50\n  return Math.min(Math.max(Math.trunc(value), 1), 1000)\n}\n\nfunction parseOffset(param: string | null): number {\n  if (!param) return 0\n  const value = Number(param)\n  if (!Number.isFinite(value)) return 0\n  return Math.max(Math.trunc(value), 0)\n}\n\nfunction splitCsv(value: string | null): string[] {\n  if (!value) return []\n  return value\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean)\n}\n\nfunction parseActionTypes(param: string | null) {\n  return splitCsv(param).filter((value): value is (typeof ACTION_TYPE_TOKENS)[number] =>\n    ACTION_TYPE_TOKENS.includes(value as (typeof ACTION_TYPE_TOKENS)[number]),\n  )\n}\n\nfunction parseNumber(param: string | null, { min, max, fallback }: { min: number; max: number; fallback: number }) {\n  if (!param) return fallback\n  const value = Number(param)\n  if (!Number.isFinite(value)) return fallback\n  const normalized = Math.trunc(value)\n  if (Number.isNaN(normalized)) return fallback\n  return Math.min(Math.max(normalized, min), max)\n}\n\nexport async function GET(req: Request) {\n  const auth = await getAuthFromRequest(req)\n  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n\n  const tenantScopeGuard = requireResolvedTenantScope(auth)\n  if (tenantScopeGuard) return tenantScopeGuard\n\n  const container = await createRequestContainer()\n  const { organizationId: defaultOrganizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req })\n\n  const rbac = (container.resolve('rbacService') as RbacService)\n  const actionLogs = (container.resolve('actionLogService') as ActionLogService)\n  const em = (container.resolve('em') as EntityManager)\n\n  const canViewTenant = await rbac.userHasAllFeatures(\n    auth.sub,\n    ['audit_logs.view_tenant'],\n    { tenantId: auth.tenantId ?? null, organizationId: defaultOrganizationId ?? null },\n  )\n\n  const url = new URL(req.url)\n  const queryOrgId = url.searchParams.get('organizationId')\n  const actorQuery = url.searchParams.get('actorUserId')\n  const resourceKind = url.searchParams.get('resourceKind') ?? undefined\n  const resourceId = url.searchParams.get('resourceId') ?? undefined\n  const actionTypes = parseActionTypes(url.searchParams.get('actionType'))\n  const fieldNames = splitCsv(url.searchParams.get('fieldName'))\n  const includeRelated = parseBooleanToken(url.searchParams.get('includeRelated')) === true\n  const includeTotal = parseBooleanToken(url.searchParams.get('includeTotal')) === true\n  const undoableOnly = parseBooleanToken(url.searchParams.get('undoableOnly')) === true\n  const limit = parseLimit(url.searchParams.get('limit'))\n  const offset = parseOffset(url.searchParams.get('offset'))\n  const page = parseNumber(url.searchParams.get('page'), { min: 1, max: 1000000, fallback: 1 })\n  const pageSize = parseNumber(url.searchParams.get('pageSize'), { min: 1, max: 200, fallback: 50 })\n  const sortField = SORT_FIELDS.find((value) => value === url.searchParams.get('sortField')) ?? 'createdAt'\n  const sortDir = SORT_DIRECTIONS.find((value) => value === url.searchParams.get('sortDir')) ?? 'desc'\n  const before = parseDate(url.searchParams.get('before'))\n  const after = parseDate(url.searchParams.get('after'))\n\n  let organizationId = defaultOrganizationId\n  if (queryOrgId) {\n    if (scope.allowedIds === null || scope.allowedIds.includes(queryOrgId)) {\n      organizationId = queryOrgId\n    }\n  }\n\n  let actorUserId: string | undefined = canViewTenant ? undefined : auth.sub\n  let actorUserIds: string[] | undefined\n  if (canViewTenant && actorQuery) {\n    const parsedActorUserIds = splitCsv(actorQuery)\n    if (parsedActorUserIds.length === 1) {\n      actorUserId = parsedActorUserIds[0]\n    } else if (parsedActorUserIds.length > 1) {\n      actorUserId = undefined\n      actorUserIds = parsedActorUserIds\n    }\n  }\n\n  const listQuery = {\n    tenantId: auth.tenantId ?? undefined,\n    organizationId: organizationId ?? undefined,\n    actorUserId,\n    actorUserIds,\n    resourceKind,\n    resourceId,\n    actionTypes,\n    fieldNames,\n    includeRelated,\n    undoableOnly,\n    sortField,\n    sortDir,\n    limit,\n    offset,\n    page,\n    pageSize,\n    before,\n    after,\n  }\n\n  // includeTotal flag is retained for backward compatibility but page-based pagination\n  // always returns total/totalPages from the list query's findAndCount.\n  void includeTotal\n  let list: Awaited<ReturnType<ActionLogService['list']>>\n  try {\n    list = await actionLogs.list(listQuery)\n  } catch (err) {\n    if (err instanceof z.ZodError) {\n      return NextResponse.json({ error: 'Validation failed', details: err.issues }, { status: 400 })\n    }\n    throw err\n  }\n\n  const displayMaps = await loadAuditLogDisplayMaps(em, {\n    userIds: list.items.map((entry: any) => entry.actorUserId).filter((value: any): value is string => !!value),\n    tenantIds: list.items.map((entry: any) => entry.tenantId).filter((value: any): value is string => !!value),\n    organizationIds: list.items.map((entry: any) => entry.organizationId).filter((value: any): value is string => !!value),\n  })\n\n  const items = list.items.map((entry: any) => ({\n    id: entry.id,\n    commandId: entry.commandId,\n    actionLabel: entry.actionLabel,\n    executionState: entry.executionState,\n    actorUserId: entry.actorUserId,\n    actorUserName: entry.actorUserId ? displayMaps.users[entry.actorUserId] ?? null : null,\n    tenantId: entry.tenantId,\n    tenantName: entry.tenantId ? displayMaps.tenants[entry.tenantId] ?? null : null,\n    organizationId: entry.organizationId,\n    organizationName: entry.organizationId ? displayMaps.organizations[entry.organizationId] ?? null : null,\n    resourceKind: entry.resourceKind,\n    resourceId: entry.resourceId,\n    parentResourceKind: entry.parentResourceKind,\n    parentResourceId: entry.parentResourceId,\n    undoToken: entry.undoToken,\n    createdAt: entry.createdAt?.toISOString?.() ?? entry.createdAt,\n    updatedAt: entry.updatedAt?.toISOString?.() ?? entry.updatedAt,\n    snapshotBefore: entry.snapshotBefore,\n    snapshotAfter: entry.snapshotAfter,\n    changes: entry.changesJson,\n    context: entry.contextJson,\n  }))\n\n  return NextResponse.json({\n    items,\n    canViewTenant,\n    page: list.page,\n    pageSize: list.pageSize,\n    total: list.total,\n    totalPages: list.totalPages,\n  })\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  summary: 'List action audit logs',\n  description: 'Retrieve recent state-changing actions with undo/redo metadata for the current tenant.',\n  methods: {\n    GET: {\n      summary: 'Fetch action logs',\n      description:\n        'Returns recent action audit log entries. Tenant administrators can widen the scope to other actors or organizations, and callers can optionally restrict results to undoable actions.',\n      query: auditActionQuerySchema,\n      responses: [\n        { status: 200, description: 'Action logs retrieved successfully', schema: auditActionResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid filter values', schema: errorSchema },\n        { status: 401, description: 'Authentication required', schema: errorSchema },\n        { status: 403, description: 'Caller has no resolved tenant scope and is not a superadmin', schema: errorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,kCAAkC;AAI3C,SAAS,+BAA+B;AACxC,SAAS,kCAAkC;AAC3C,SAAS,SAAS;AAElB,SAAS,yBAAyB;AAClC,SAAS,+BAA+B;AAEjC,MAAM,WAAW;AAAA,EACtB,KAAK,EAAE,aAAa,MAAM,iBAAiB,CAAC,sBAAsB,EAAE;AACtE;AAEA,MAAM,qBAAqB;AAC3B,MAAM,cAAc,CAAC,aAAa,QAAQ,UAAU,SAAS,QAAQ;AACrE,MAAM,kBAAkB,CAAC,OAAO,MAAM;AAEtC,MAAM,yBAAyB,EAAE,OAAO;AAAA,EACtC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,0CAA0C,EAAE,SAAS;AAAA,EAChG,aAAa,EACV,OAAO,EACP,SAAS,+HAA+H,EACxI,SAAS;AAAA,EACZ,cAAc,EAAE,OAAO,EAAE,SAAS,oDAAoD,EAAE,SAAS;AAAA,EACjG,YAAY,EAAE,OAAO,EAAE,SAAS,qDAAqD,EAAE,SAAS;AAAA,EAChG,YAAY,EACT,OAAO,EACP,SAAS,iHAAiH,EAC1H,SAAS;AAAA,EACZ,WAAW,EACR,OAAO,EACP,SAAS,yGAAyG,EAClH,SAAS;AAAA,EACZ,gBAAgB,EACb,KAAK,CAAC,QAAQ,OAAO,CAAC,EACtB,QAAQ,OAAO,EACf,SAAS,oGAAoG,EAC7G,SAAS;AAAA,EACZ,cAAc,EACX,KAAK,CAAC,QAAQ,OAAO,CAAC,EACtB,QAAQ,OAAO,EACf,SAAS,8DAA8D,EACvE,SAAS;AAAA,EACZ,cAAc,EACX,KAAK,CAAC,QAAQ,OAAO,CAAC,EACtB,QAAQ,OAAO,EACf,SAAS,iDAAiD,EAC1D,SAAS;AAAA,EACZ,OAAO,EAAE,OAAO,EAAE,SAAS,4DAA4D,EAAE,SAAS;AAAA,EAClG,QAAQ,EAAE,OAAO,EAAE,SAAS,8EAAyE,EAAE,SAAS;AAAA,EAChH,MAAM,EAAE,OAAO,EAAE,SAAS,yBAAyB,EAAE,SAAS;AAAA,EAC9D,UAAU,EAAE,OAAO,EAAE,SAAS,iCAAiC,EAAE,SAAS;AAAA,EAC1E,WAAW,EACR,KAAK,WAAW,EAChB,SAAS,kEAAkE,EAC3E,SAAS;AAAA,EACZ,SAAS,EACN,KAAK,eAAe,EACpB,SAAS,kCAAkC,EAC3C,SAAS;AAAA,EACZ,QAAQ,EAAE,OAAO,EAAE,SAAS,uDAAuD,EAAE,SAAS;AAAA,EAC9F,OAAO,EAAE,OAAO,EAAE,SAAS,sDAAsD,EAAE,SAAS;AAC9F,CAAC;AAED,MAAM,wBAAwB,EAAE,OAAO;AAAA,EACrC,IAAI,EAAE,OAAO;AAAA,EACb,WAAW,EAAE,OAAO;AAAA,EACpB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,UAAU,UAAU,QAAQ,CAAC;AAAA,EAC7D,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACxC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EACrC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS;AAAA,EAC3C,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,oBAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACnD,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS;AAAA,EACjD,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW,EAAE,OAAO;AAAA,EACpB,gBAAgB,EAAE,QAAQ,EAAE,SAAS;AAAA,EACrC,eAAe,EAAE,QAAQ,EAAE,SAAS;AAAA,EACpC,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACpD,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACtD,CAAC;AAED,MAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,OAAO,EAAE,MAAM,qBAAqB;AAAA,EACpC,eAAe,EAAE,QAAQ;AAAA,EACzB,MAAM,EAAE,OAAO,EAAE,IAAI;AAAA,EACrB,UAAU,EAAE,OAAO,EAAE,IAAI;AAAA,EACzB,OAAO,EAAE,OAAO,EAAE,IAAI;AAAA,EACtB,YAAY,EAAE,OAAO,EAAE,IAAI;AAC7B,CAAC;AAED,MAAM,cAAc,EAAE,OAAO;AAAA,EAC3B,OAAO,EAAE,OAAO;AAClB,CAAC;AAED,SAAS,UAAU,OAAwC;AACzD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,KAAK,KAAK,MAAM,KAAK;AAC3B,MAAI,OAAO,MAAM,EAAE,EAAG,QAAO;AAC7B,SAAO,IAAI,KAAK,EAAE;AACpB;AAEA,SAAS,WAAW,OAA8B;AAChD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC,GAAG,GAAI;AACtD;AAEA,SAAS,YAAY,OAA8B;AACjD,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,SAAO,KAAK,IAAI,KAAK,MAAM,KAAK,GAAG,CAAC;AACtC;AAEA,SAAS,SAAS,OAAgC;AAChD,MAAI,CAAC,MAAO,QAAO,CAAC;AACpB,SAAO,MACJ,MAAM,GAAG,EACT,IAAI,CAAC,UAAU,MAAM,KAAK,CAAC,EAC3B,OAAO,OAAO;AACnB;AAEA,SAAS,iBAAiB,OAAsB;AAC9C,SAAO,SAAS,KAAK,EAAE;AAAA,IAAO,CAAC,UAC7B,mBAAmB,SAAS,KAA4C;AAAA,EAC1E;AACF;AAEA,SAAS,YAAY,OAAsB,EAAE,KAAK,KAAK,SAAS,GAAmD;AACjH,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,KAAK;AAC1B,MAAI,CAAC,OAAO,SAAS,KAAK,EAAG,QAAO;AACpC,QAAM,aAAa,KAAK,MAAM,KAAK;AACnC,MAAI,OAAO,MAAM,UAAU,EAAG,QAAO;AACrC,SAAO,KAAK,IAAI,KAAK,IAAI,YAAY,GAAG,GAAG,GAAG;AAChD;AAEA,eAAsB,IAAI,KAAc;AACtC,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,KAAM,QAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAE9E,QAAM,mBAAmB,2BAA2B,IAAI;AACxD,MAAI,iBAAkB,QAAO;AAE7B,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,EAAE,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,2BAA2B,EAAE,WAAW,MAAM,SAAS,IAAI,CAAC;AAE3H,QAAM,OAAQ,UAAU,QAAQ,aAAa;AAC7C,QAAM,aAAc,UAAU,QAAQ,kBAAkB;AACxD,QAAM,KAAM,UAAU,QAAQ,IAAI;AAElC,QAAM,gBAAgB,MAAM,KAAK;AAAA,IAC/B,KAAK;AAAA,IACL,CAAC,wBAAwB;AAAA,IACzB,EAAE,UAAU,KAAK,YAAY,MAAM,gBAAgB,yBAAyB,KAAK;AAAA,EACnF;AAEA,QAAM,MAAM,IAAI,IAAI,IAAI,GAAG;AAC3B,QAAM,aAAa,IAAI,aAAa,IAAI,gBAAgB;AACxD,QAAM,aAAa,IAAI,aAAa,IAAI,aAAa;AACrD,QAAM,eAAe,IAAI,aAAa,IAAI,cAAc,KAAK;AAC7D,QAAM,aAAa,IAAI,aAAa,IAAI,YAAY,KAAK;AACzD,QAAM,cAAc,iBAAiB,IAAI,aAAa,IAAI,YAAY,CAAC;AACvE,QAAM,aAAa,SAAS,IAAI,aAAa,IAAI,WAAW,CAAC;AAC7D,QAAM,iBAAiB,kBAAkB,IAAI,aAAa,IAAI,gBAAgB,CAAC,MAAM;AACrF,QAAM,eAAe,kBAAkB,IAAI,aAAa,IAAI,cAAc,CAAC,MAAM;AACjF,QAAM,eAAe,kBAAkB,IAAI,aAAa,IAAI,cAAc,CAAC,MAAM;AACjF,QAAM,QAAQ,WAAW,IAAI,aAAa,IAAI,OAAO,CAAC;AACtD,QAAM,SAAS,YAAY,IAAI,aAAa,IAAI,QAAQ,CAAC;AACzD,QAAM,OAAO,YAAY,IAAI,aAAa,IAAI,MAAM,GAAG,EAAE,KAAK,GAAG,KAAK,KAAS,UAAU,EAAE,CAAC;AAC5F,QAAM,WAAW,YAAY,IAAI,aAAa,IAAI,UAAU,GAAG,EAAE,KAAK,GAAG,KAAK,KAAK,UAAU,GAAG,CAAC;AACjG,QAAM,YAAY,YAAY,KAAK,CAAC,UAAU,UAAU,IAAI,aAAa,IAAI,WAAW,CAAC,KAAK;AAC9F,QAAM,UAAU,gBAAgB,KAAK,CAAC,UAAU,UAAU,IAAI,aAAa,IAAI,SAAS,CAAC,KAAK;AAC9F,QAAM,SAAS,UAAU,IAAI,aAAa,IAAI,QAAQ,CAAC;AACvD,QAAM,QAAQ,UAAU,IAAI,aAAa,IAAI,OAAO,CAAC;AAErD,MAAI,iBAAiB;AACrB,MAAI,YAAY;AACd,QAAI,MAAM,eAAe,QAAQ,MAAM,WAAW,SAAS,UAAU,GAAG;AACtE,uBAAiB;AAAA,IACnB;AAAA,EACF;AAEA,MAAI,cAAkC,gBAAgB,SAAY,KAAK;AACvE,MAAI;AACJ,MAAI,iBAAiB,YAAY;AAC/B,UAAM,qBAAqB,SAAS,UAAU;AAC9C,QAAI,mBAAmB,WAAW,GAAG;AACnC,oBAAc,mBAAmB,CAAC;AAAA,IACpC,WAAW,mBAAmB,SAAS,GAAG;AACxC,oBAAc;AACd,qBAAe;AAAA,IACjB;AAAA,EACF;AAEA,QAAM,YAAY;AAAA,IAChB,UAAU,KAAK,YAAY;AAAA,IAC3B,gBAAgB,kBAAkB;AAAA,IAClC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAIA,OAAK;AACL,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,WAAW,KAAK,SAAS;AAAA,EACxC,SAAS,KAAK;AACZ,QAAI,eAAe,EAAE,UAAU;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,SAAS,IAAI,OAAO,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/F;AACA,UAAM;AAAA,EACR;AAEA,QAAM,cAAc,MAAM,wBAAwB,IAAI;AAAA,IACpD,SAAS,KAAK,MAAM,IAAI,CAAC,UAAe,MAAM,WAAW,EAAE,OAAO,CAAC,UAAgC,CAAC,CAAC,KAAK;AAAA,IAC1G,WAAW,KAAK,MAAM,IAAI,CAAC,UAAe,MAAM,QAAQ,EAAE,OAAO,CAAC,UAAgC,CAAC,CAAC,KAAK;AAAA,IACzG,iBAAiB,KAAK,MAAM,IAAI,CAAC,UAAe,MAAM,cAAc,EAAE,OAAO,CAAC,UAAgC,CAAC,CAAC,KAAK;AAAA,EACvH,CAAC;AAED,QAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,WAAgB;AAAA,IAC5C,IAAI,MAAM;AAAA,IACV,WAAW,MAAM;AAAA,IACjB,aAAa,MAAM;AAAA,IACnB,gBAAgB,MAAM;AAAA,IACtB,aAAa,MAAM;AAAA,IACnB,eAAe,MAAM,cAAc,YAAY,MAAM,MAAM,WAAW,KAAK,OAAO;AAAA,IAClF,UAAU,MAAM;AAAA,IAChB,YAAY,MAAM,WAAW,YAAY,QAAQ,MAAM,QAAQ,KAAK,OAAO;AAAA,IAC3E,gBAAgB,MAAM;AAAA,IACtB,kBAAkB,MAAM,iBAAiB,YAAY,cAAc,MAAM,cAAc,KAAK,OAAO;AAAA,IACnG,cAAc,MAAM;AAAA,IACpB,YAAY,MAAM;AAAA,IAClB,oBAAoB,MAAM;AAAA,IAC1B,kBAAkB,MAAM;AAAA,IACxB,WAAW,MAAM;AAAA,IACjB,WAAW,MAAM,WAAW,cAAc,KAAK,MAAM;AAAA,IACrD,WAAW,MAAM,WAAW,cAAc,KAAK,MAAM;AAAA,IACrD,gBAAgB,MAAM;AAAA,IACtB,eAAe,MAAM;AAAA,IACrB,SAAS,MAAM;AAAA,IACf,SAAS,MAAM;AAAA,EACjB,EAAE;AAEF,SAAO,aAAa,KAAK;AAAA,IACvB;AAAA,IACA;AAAA,IACA,MAAM,KAAK;AAAA,IACX,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,IACZ,YAAY,KAAK;AAAA,EACnB,CAAC;AACH;AAEO,MAAM,UAA2B;AAAA,EACtC,SAAS;AAAA,EACT,aAAa;AAAA,EACb,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aACE;AAAA,MACF,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,sCAAsC,QAAQ,0BAA0B;AAAA,MACtG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,YAAY;AAAA,QACzE,EAAE,QAAQ,KAAK,aAAa,2BAA2B,QAAQ,YAAY;AAAA,QAC3E,EAAE,QAAQ,KAAK,aAAa,+DAA+D,QAAQ,YAAY;AAAA,MACjH;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/audit_logs/api/audit-logs/readScope.js

@@ -0,0 +1,12 @@
+import { NextResponse } from "next/server";
+function isSuperAdmin(auth) {
+  return auth.isSuperAdmin === true;
+}
+function requireResolvedTenantScope(auth) {
+  if (auth.tenantId || isSuperAdmin(auth)) return null;
+  return NextResponse.json({ error: "Forbidden" }, { status: 403 });
+}
+export {
+  requireResolvedTenantScope
+};
+//# sourceMappingURL=readScope.js.map

package/dist/modules/audit_logs/api/audit-logs/readScope.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/audit_logs/api/audit-logs/readScope.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { AuthContext } from '@open-mercato/shared/lib/auth/server'\n\ntype ResolvedAuth = NonNullable<AuthContext>\n\n// `isSuperAdmin` is not part of the declared `AuthContext` shape \u2014 it reaches callers\n// through the type's index signature \u2014 so read it exactly the way\n// `shared/lib/auth/server.ts` does instead of widening the shared contract here.\nfunction isSuperAdmin(auth: ResolvedAuth): boolean {\n  return (auth as Record<string, unknown>).isSuperAdmin === true\n}\n\n/**\n * Fail closed on tenant scope for audit-log reads.\n *\n * `audit_logs.view_tenant` only widens visibility WITHIN a tenant, so cross-tenant reads\n * must be gated on `isSuperAdmin`, never on the caller's tenant being empty: a tenant-less\n * principal (unscoped API key or global account) holding `view_tenant` otherwise drops the\n * tenant, organization and actor predicates at once and reads decrypted action-log rows for\n * every tenant in the instance (issues #3817, #3818).\n *\n * Plain truthiness is deliberate \u2014 it matches the `if (parsed.tenantId)` predicate guard in\n * ActionLogService/AccessLogService, so every value that would skip it is rejected here.\n */\nexport function requireResolvedTenantScope(auth: ResolvedAuth): NextResponse | null {\n  if (auth.tenantId || isSuperAdmin(auth)) return null\n  return NextResponse.json({ error: 'Forbidden' }, { status: 403 })\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAQ7B,SAAS,aAAa,MAA6B;AACjD,SAAQ,KAAiC,iBAAiB;AAC5D;AAcO,SAAS,2BAA2B,MAAyC;AAClF,MAAI,KAAK,YAAY,aAAa,IAAI,EAAG,QAAO;AAChD,SAAO,aAAa,KAAK,EAAE,OAAO,YAAY,GAAG,EAAE,QAAQ,IAAI,CAAC;AAClE;",
+  "names": []
+}

package/dist/modules/directory/api/organization-switcher/route.js

@@ -6,14 +6,35 @@ import { Organization } from "@open-mercato/core/modules/directory/data/entities
 import { computeHierarchyForOrganizations } from "@open-mercato/core/modules/directory/lib/hierarchy";
 import { isAllOrganizationsSelection } from "@open-mercato/core/modules/directory/constants";
 import {
+  buildOrgScopeTenantCacheTag,
   getSelectedOrganizationFromRequest,
   getSelectedTenantFromRequest,
   resolveOrganizationScope
 } from "@open-mercato/core/modules/directory/utils/organizationScope";
-import { directoryTag, directoryErrorSchema, organizationSwitcherResponseSchema } from "../openapi.js";
+import { runWithCacheTenant } from "@open-mercato/cache";
+import {
+  directoryTag,
+  directoryErrorSchema,
+  directoryIdSchema,
+  organizationSwitcherResponseSchema
+} from "../openapi.js";
 import { Tenant } from "@open-mercato/core/modules/directory/data/entities";
 import { createLogger } from "@open-mercato/shared/lib/logger";
 const logger = createLogger("directory").child({ component: "organization-switcher" });
+const ORGANIZATION_SWITCHER_CACHE_TTL_MS = 6e4;
+const organizationSwitcherCachePayloadSchema = organizationSwitcherResponseSchema.or(
+  organizationSwitcherResponseSchema.pick({
+    items: true,
+    selectedId: true,
+    canManage: true
+  })
+);
+function buildSelectionCacheKeyPart(rawSelected) {
+  if (isAllOrganizationsSelection(rawSelected)) return "mode:all";
+  if (rawSelected === null) return "mode:none";
+  const parsedOrganizationId = directoryIdSchema.safeParse(rawSelected);
+  return parsedOrganizationId.success ? `org:${parsedOrganizationId.data.toLowerCase()}` : null;
+}
 function buildOrganizationMenu(hierarchy, accessible) {
   const roots = [];
   const selectableIds = /* @__PURE__ */ new Set();
@@ -110,6 +131,44 @@ async function GET(req) {
         isSuperAdmin: actorIsSuperAdmin
       });
     }
+    const rawSelected = getSelectedOrganizationFromRequest(req);
+    const requestedAll = isAllOrganizationsSelection(rawSelected);
+    const selectedKeyPart = buildSelectionCacheKeyPart(rawSelected);
+    const cacheKey = selectedKeyPart ? `org-switcher:v1:${auth.sub}:${tenantId}:${selectedKeyPart}` : null;
+    let cache = null;
+    if (!actorIsSuperAdmin && cacheKey) {
+      try {
+        cache = container.resolve("cache");
+      } catch {
+        cache = null;
+      }
+    }
+    const logAccess = async (payload) => {
+      await logCrudAccess({
+        container,
+        auth,
+        request: req,
+        items: payload.items,
+        idField: "id",
+        resourceKind: "directory.organization_switcher",
+        organizationId: payload.selectedId,
+        tenantId,
+        query: Object.fromEntries(url.searchParams.entries())
+      });
+    };
+    if (cache && cacheKey) {
+      const activeCache = cache;
+      try {
+        const cached = await runWithCacheTenant(tenantId, () => activeCache.get(cacheKey));
+        const parsedCached = organizationSwitcherCachePayloadSchema.safeParse(cached);
+        if (parsedCached.success) {
+          await logAccess(parsedCached.data);
+          return NextResponse.json(parsedCached.data);
+        }
+      } catch (err) {
+        logger.warn("Failed to read organization switcher cache", { err });
+      }
+    }
     const scopedOrgId = actorTenantId && actorTenantId === tenantId ? auth.orgId ?? null : null;
     const acl = await rbac.loadAcl(auth.sub, { tenantId, organizationId: scopedOrgId });
     const aclIsSuperAdmin = acl?.isSuperAdmin === true;
@@ -128,9 +187,7 @@ async function GET(req) {
       { orderBy: { name: "ASC" } }
     );
     const hierarchy = computeHierarchyForOrganizations(orgEntities, tenantId);
-    const rawSelected = getSelectedOrganizationFromRequest(req);
     let hasSelectionCookie = rawSelected !== null;
-    const requestedAll = isAllOrganizationsSelection(rawSelected);
     const scope = await resolveOrganizationScope({
       em,
       rbac,
@@ -157,30 +214,37 @@ async function GET(req) {
       }
     }
     const showMenu = menuData.nodes.length > 0 || hasManageFeature || effectiveIsSuperAdmin;
-    if (!showMenu) {
-      return NextResponse.json({ items: [], selectedId: null, canManage: false });
-    }
-    const canViewAllOrganizations = accessible === null;
-    const response = {
+    const response = showMenu ? {
       items: menuData.nodes,
       selectedId,
       canManage: !!hasManageFeature,
-      canViewAllOrganizations,
+      canViewAllOrganizations: accessible === null,
       tenantId,
       tenants: tenantRecords,
       isSuperAdmin: effectiveIsSuperAdmin
+    } : {
+      items: [],
+      selectedId: null,
+      canManage: false
     };
-    await logCrudAccess({
-      container,
-      auth,
-      request: req,
-      items: response.items,
-      idField: "id",
-      resourceKind: "directory.organization_switcher",
-      organizationId: response.selectedId,
-      tenantId,
-      query: Object.fromEntries(url.searchParams.entries())
-    });
+    if (cache && cacheKey) {
+      const activeCache = cache;
+      try {
+        await runWithCacheTenant(
+          tenantId,
+          () => activeCache.set(cacheKey, response, {
+            ttl: ORGANIZATION_SWITCHER_CACHE_TTL_MS,
+            tags: [
+              buildOrgScopeTenantCacheTag(tenantId),
+              `rbac:user:${auth.sub}`
+            ]
+          })
+        );
+      } catch (err) {
+        logger.warn("Failed to write organization switcher cache", { err });
+      }
+    }
+    await logAccess(response);
     return NextResponse.json(response);
   } catch (err) {
     logger.error("Failed to build organization switcher payload", { err });